Project

General

Profile

Actions
Copy link

Bug #19800

closed

cannot manage resource in technique editor in 7.0 when technique name is not set yet

Added by Nicolas CHARLES over 2 years ago. Updated over 2 years ago.

Status:
Rejected
Priority:
N/A
Assignee:
-
Category:
Web - Technique editor
Target version:
7.0.0~beta2
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:

Description

when trying to manage resource, with a technique without name I get the following message

logs say

2021-08-16 17:33:34.076:WARN:oejs.HttpChannel:qtp1782580546-19: /rudder/secure/api/internal/techniques/dra
ft//1.0/resources
org.springframework.security.web.firewall.RequestRejectedException: The request was rejected because the U
RL contained a potentially malicious String "//" 
        at org.springframework.security.web.firewall.StrictHttpFirewall.rejectedBlocklistedUrls(StrictHttpFirewall.java:456)
        at org.springframework.security.web.firewall.StrictHttpFirewall.getFirewalledRequest(StrictHttpFirewall.java:429)
        at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:196)
        at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:183)

Files

clipboard-202108161735-ynvns.png (56.5 KB) clipboard-202108161735-ynvns.png Nicolas CHARLES, 2021-08-16 17:35
Actions
Copy link

Also available in: Atom PDF