Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0056996
TypeCategorySeverityReproducibilityDate SubmittedLast Update
backport[Openbravo ERP] A. Platformmajorhave not tried2024-10-14 08:112024-11-28 13:00
ReporteralostaleView Statuspublic 
Assigned ToTriage Platform Base 
PrioritynormalResolutionopenFixed in Version
StatusscheduledFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget VersionPR24Q2.5
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Review Assigned To
Web browser
ModulesCore
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0056996: broken layout in window title

DescriptionWhen opening a link to Openbravo backoffice if the title of a view contains some special characters the layout can be broken.
Steps To ReproduceTry to open some link like:

https://localhost:8080/openbravo/#%7Bst:0,bm:%5B%7BviewId:__X__,params:%7BtabTitle:__%3Cimg%20src=a%20onerr [^]
or=alert()%3E__%7D%7D%5D%7D
Proposed SolutionProperly treat/escape tab titles when rendering them.
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]
blocks defect 0056754 closedTriage Platform Base broken layout in window title 

-  Notes
(0172713)
hgbot (developer)
2024-11-28 13:00

 Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/1462 [^]

- Issue History
Date Modified Username Field Change
2024-11-05 18:53 AugustoMauch Type defect => backport
2024-11-05 18:53 AugustoMauch Target Version => PR24Q2.5
2024-11-28 13:00 hgbot Note Added: 0172713

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker