Project

General

Profile

Actions

Bug #25542

open

inventories with utf8 software don't show up with utf8 software in the ui

Added by Nicolas CHARLES about 2 months ago. Updated 14 days ago.

Status:
New
Priority:
2
Assignee:
-
Category:
Web - Nodes & inventories
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

inventory contains

    <SOFTWARES>
      <ARCH>x86_64</ARCH>
      <FROM>registry</FROM>
      <GUID>{90150000-001F-0403-1000-0000000FF1CE}</GUID>
      <INSTALLDATE>25/09/2024</INSTALLDATE>
      <NAME>Microsoft Office Proofing Tools 2013 B€r#{| ¤*ﮝﮄﮔשׁﯺﻶ</NAME>
      <SYSTEM_CATEGORY>application</SYSTEM_CATEGORY>
      <VERSION>15.0.4569.1506</VERSION>
    </SOFTWARES>



Files


Related issues 2 (1 open1 closed)

Related to Rudder - Bug #25395: Fusion inventory fails to report software with exotic names - some entries randomly disappearReleasedFélix DALLIDETActions
Related to Rudder - Bug #25584: the hoover on compliance shows HTMLNewFrançois ARMANDActions
Actions #1

Updated by François ARMAND about 2 months ago

  • Related to Bug #25395: Fusion inventory fails to report software with exotic names - some entries randomly disappear added
Actions #2

Updated by François ARMAND about 2 months ago

  • Assignee set to François ARMAND
  • Priority changed from N/A to 1 (highest)
Actions #3

Updated by François ARMAND about 2 months ago

  • Status changed from New to In progress

Updated by François ARMAND about 2 months ago

So, I can reproduce it. It's not a parsing problem, nor a save problem: it's OK in LDAP:

But the UI shows:

Actions #5

Updated by François ARMAND about 2 months ago

  • Target version changed from 8.2.0~rc1 to 8.1.8

I think it's just a display problem in fact.

Actions #6

Updated by François ARMAND about 2 months ago

  • Priority changed from 1 (highest) to 2

(and so it's less prioritary)

Actions #7

Updated by François ARMAND about 2 months ago · Edited

It's our escapreJs method that does that in DisplayNode:

private def escapeJs(in:   String):         JsExp   = Str(StringEscapeUtils.escapeEcmaScript(in))

It means that it's not very grave, and that the correction will need special care to not introduce a security vulnerability

Actions #8

Updated by François ARMAND about 2 months ago · Edited

And it's a special weekness of the lib: https://stackoverflow.com/a/59332501

Actions #9

Updated by Félix DALLIDET about 2 months ago

I have a similar issue with newlines in the compliance that could be related.
If a report message contains newlines, they are no longer displayed in the compliance webpage.

See the example below:

 psql -U rudder -h localhost -c "select * from ruddersysevents where nodeid ='276a47dd-2afc-4d98-a88c-41b20cedae75' order by id desc" 
 37085 | Expression 'true' evaluates to true,  A message with                                                                                                                                                                                          +
       | some                                                                                                                                                                                                                                          +
       | new                                                                                                                                                                                                                                           +
       | lines                                                                                                                                                                                                                                         +
       | and a                                                                                                                                                                                                                                         +
       | \n                                                                                                                                                                                                                                            +
       | just to see was correct

Using an input like such:

id: linux_one
name: Linux one
version: '1.0'
category: ncf_techniques
items:
  - id: 6e6dcbf9-1ade-4b0b-962a-bbd8b2f20dcb
    name: ''
    method: report_if_condition
    params:
      report_message: |-
        A message with
        some
        new
        lines
        and a
        \n
        just to see
      condition: 'true'

The compliance is "broken" as the newlines are removed from the message content.

Actions #10

Updated by Nicolas CHARLES about 2 months ago

  • Related to Bug #25584: the hoover on compliance shows HTML added
Actions #11

Updated by François ARMAND about 1 month ago

  • Status changed from In progress to New
  • Assignee deleted (François ARMAND)
Actions #12

Updated by Vincent MEMBRÉ 14 days ago

  • Target version changed from 8.1.8 to 8.1.9
Actions

Also available in: Atom PDF