Project

General

Profile

Actions
Copy link

Bug #56133

closed

Manager > Object Gateway > Users does not HTML encode "Full Name" field

Added by Matthew Darwin almost 2 years ago. Updated about 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
Pedro González Gómez
Category:
-
Target version:
-
% Done:

0%

Source:
Community (user)
Tags:
backport_processed
Backport:
quincy,pacific
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
Ceph - v17.0.0
ceph-qa-suite:
Pull request ID:
46996
Crash signature (v1):
Crash signature (v2):

Description

Manager > Object Gateway > Users does not HTML encode "Full Name" field

Set the Full name of a user to "<b>bold</b> name". You will see the "bold" part actually in bold.

Files

html-injection.png (25.4 KB) html-injection.png Matthew Darwin, 06/20/2022 09:22 PM

Related issues 2 (0 open — 2 closed)

Copied to Dashboard - Backport #56946: pacific: Manager > Object Gateway > Users does not HTML encode "Full Name" fieldResolvedPedro González Gómez Actions
Copied to Dashboard - Backport #56947: quincy: Manager > Object Gateway > Users does not HTML encode "Full Name" fieldResolvedPedro González Gómez Actions
Actions
Copy link
 #1

Updated by Casey Bodley almost 2 years ago

  • Project changed from rgw to Dashboard
Actions
Copy link
 #2

Updated by Nizamudeen A almost 2 years ago

  • Status changed from New to Triaged
  • Assignee set to Pedro González Gómez
Actions
Copy link
 #3

Updated by Pedro González Gómez almost 2 years ago

  • Pull request ID set to 46996
Actions
Copy link
 #4

Updated by Pedro González Gómez over 1 year ago

  • Backport set to quincy,pacific
Actions
Copy link
 #5

Updated by Pedro González Gómez over 1 year ago

  • Status changed from Triaged to Pending Backport
Actions
Copy link
 #6

Updated by Backport Bot over 1 year ago

  • Copied to Backport #56946: pacific: Manager > Object Gateway > Users does not HTML encode "Full Name" field added
Actions
Copy link
 #7

Updated by Backport Bot over 1 year ago

  • Copied to Backport #56947: quincy: Manager > Object Gateway > Users does not HTML encode "Full Name" field added
Actions
Copy link
 #8

Updated by Backport Bot over 1 year ago

  • Tags set to backport_processed
Actions
Copy link
 #9

Updated by Pedro González Gómez about 1 year ago

  • Status changed from Pending Backport to Resolved
Actions
Copy link

Also available in: Atom PDF