Project

General

Profile

Actions
Copy link

Bug #14271

closed

JS in directive name is executed on rule table if the directive is disabled

Bug #14271: JS in directive name is executed on rule table if the directive is disabled

Added by François ARMAND almost 7 years ago. Updated almost 7 years ago.

Status:
Released
Priority:
N/A
Assignee:
Nicolas CHARLES
Category:
Web - UI & UX
Target version:
4.1.20
Pull Request:
https://github.com/Normation/rudder/p...
Severity:
Minor - inconvenience | misleading | easy workaround
UX impact:
User visibility:
Infrequent - complex configurations | third party integrations
Effort required:
Priority:
22
Name check:
Fix check:
Regression:

Description

We still have a problem similar to #14221, but not a security one, in the explication of why a rule is disable is the js is in directive name.

Related issues 1 (0 open — 1 closed)

Related to Rudder - Bug #14221: we can inject html & javascript in Rudder tablesReleasedFrançois ARMANDActions

Updated by François ARMAND almost 7 years ago Actions
Copy link
 #1

  • Status changed from New to In progress

Updated by François ARMAND almost 7 years ago Actions
Copy link
 #2

  • Related to Bug #14221: we can inject html & javascript in Rudder tables added

Updated by François ARMAND almost 7 years ago Actions
Copy link
 #3

  • Status changed from In progress to Pending technical review
  • Assignee changed from François ARMAND to Nicolas CHARLES
  • Pull Request set to https://github.com/Normation/rudder/pull/2131

Updated by François ARMAND almost 7 years ago Actions
Copy link
 #4

  • Status changed from Pending technical review to Pending release

Updated by François ARMAND almost 7 years ago Actions
Copy link
 #5

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 4.1.20, 4.3.10 and 5.0.6 which were released today.

Actions
Copy link

Also available in: PDF Atom