Project

General

Profile

Actions

Bug #25542

open

inventories with utf8 software don't show up with utf8 software in the ui

Bug #25542: inventories with utf8 software don't show up with utf8 software in the ui

Added by Nicolas CHARLES about 1 year ago. Updated 26 days ago.

Status:
New
Priority:
2
Category:
Web - Nodes & inventories
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

inventory contains

    <SOFTWARES>
      <ARCH>x86_64</ARCH>
      <FROM>registry</FROM>
      <GUID>{90150000-001F-0403-1000-0000000FF1CE}</GUID>
      <INSTALLDATE>25/09/2024</INSTALLDATE>
      <NAME>Microsoft Office Proofing Tools 2013 B€r#{| ¤*ﮝﮄﮔשׁﯺﻶ</NAME>
      <SYSTEM_CATEGORY>application</SYSTEM_CATEGORY>
      <VERSION>15.0.4569.1506</VERSION>
    </SOFTWARES>



Files


Related issues 3 (0 open3 closed)

Related to Rudder - Bug #25395: Fusion inventory fails to report software with exotic names - some entries randomly disappearReleasedFélix DALLIDETActions
Related to Rudder - Bug #25584: the hover on compliance shows HTMLReleasedFrançois ARMANDActions
Related to Rudder - Bug #25471: There's no software in node in 8.2ResolvedActions

Updated by François ARMAND about 1 year ago Actions #1

  • Related to Bug #25395: Fusion inventory fails to report software with exotic names - some entries randomly disappear added

Updated by François ARMAND about 1 year ago Actions #2

  • Assignee set to François ARMAND
  • Priority changed from N/A to 1 (highest)

Updated by François ARMAND about 1 year ago Actions #3

  • Status changed from New to In progress

Updated by François ARMAND about 1 year ago Actions #4

clipboard-202409261704-6fhsx.png
clipboard-202409261704-wegit.png

So, I can reproduce it. It's not a parsing problem, nor a save problem: it's OK in LDAP:

But the UI shows:

Updated by François ARMAND about 1 year ago Actions #5

  • Target version changed from 8.2.0~rc1 to 8.1.8

I think it's just a display problem in fact.

Updated by François ARMAND about 1 year ago Actions #6

  • Priority changed from 1 (highest) to 2

(and so it's less prioritary)

Updated by François ARMAND about 1 year ago · Edited Actions #7

It's our escapreJs method that does that in DisplayNode:

private def escapeJs(in:   String):         JsExp   = Str(StringEscapeUtils.escapeEcmaScript(in))

It means that it's not very grave, and that the correction will need special care to not introduce a security vulnerability

Updated by François ARMAND about 1 year ago · Edited Actions #8

And it's a special weekness of the lib: https://stackoverflow.com/a/59332501

Updated by Félix DALLIDET about 1 year ago Actions #9

2024-10-01_17-35.png

I have a similar issue with newlines in the compliance that could be related.
If a report message contains newlines, they are no longer displayed in the compliance webpage.

See the example below:

 psql -U rudder -h localhost -c "select * from ruddersysevents where nodeid ='276a47dd-2afc-4d98-a88c-41b20cedae75' order by id desc" 
 37085 | Expression 'true' evaluates to true,  A message with                                                                                                                                                                                          +
       | some                                                                                                                                                                                                                                          +
       | new                                                                                                                                                                                                                                           +
       | lines                                                                                                                                                                                                                                         +
       | and a                                                                                                                                                                                                                                         +
       | \n                                                                                                                                                                                                                                            +
       | just to see was correct

Using an input like such:

id: linux_one
name: Linux one
version: '1.0'
category: ncf_techniques
items:
  - id: 6e6dcbf9-1ade-4b0b-962a-bbd8b2f20dcb
    name: ''
    method: report_if_condition
    params:
      report_message: |-
        A message with
        some
        new
        lines
        and a
        \n
        just to see
      condition: 'true'

The compliance is "broken" as the newlines are removed from the message content.

Updated by Nicolas CHARLES about 1 year ago Actions #10

  • Related to Bug #25584: the hover on compliance shows HTML added

Updated by François ARMAND about 1 year ago Actions #11

  • Status changed from In progress to New
  • Assignee deleted (François ARMAND)

Updated by Vincent MEMBRÉ about 1 year ago Actions #12

  • Target version changed from 8.1.8 to 8.1.9

Updated by François ARMAND about 1 year ago Actions #13

  • Related to Bug #25471: There's no software in node in 8.2 added

Updated by Vincent MEMBRÉ about 1 year ago Actions #14

  • Target version changed from 8.1.9 to 8.1.10

Updated by Vincent MEMBRÉ about 1 year ago Actions #15

  • Target version changed from 8.1.10 to 8.1.11

Updated by Vincent MEMBRÉ 11 months ago Actions #16

  • Target version changed from 8.1.11 to 8.1.12

Updated by Vincent MEMBRÉ 10 months ago Actions #17

  • Target version changed from 8.1.12 to 8.1.13

Updated by Vincent MEMBRÉ 7 months ago Actions #18

  • Target version changed from 8.1.13 to 8.2.6

Updated by Vincent MEMBRÉ 7 months ago Actions #19

  • Target version changed from 8.2.6 to 8.2.7

Updated by François ARMAND 7 months ago Actions #20

  • Assignee set to Clark ANDRIANASOLO

Updated by Vincent MEMBRÉ 6 months ago Actions #21

  • Target version changed from 8.2.7 to 8.2.8

Updated by Félix DALLIDET 5 months ago Actions #22

  • Target version changed from 8.2.8 to 8.2.9

Updated by Vincent MEMBRÉ 3 months ago Actions #23

  • Target version changed from 8.2.9 to 1133

Updated by Alexis Mousset about 2 months ago Actions #24

  • Target version changed from 1133 to 8.3.6

Updated by Vincent MEMBRÉ 26 days ago Actions #25

  • Target version changed from 8.3.6 to 8.3.7
Actions

Also available in: PDF Atom