[jira] [Commented] (GUACAMOLE-1261) Users/groups with identifiers containing slashes cannot be modified

["Nick Couchman (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GUACAMOLE-1261?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17403280#comment-17403280 ] 

Nick Couchman commented on GUACAMOLE-1261:
------------------------------------------

Okay, I'll take another look and do the encoding. I had originally started down that path when I figured out that the AngularJS router was interfering (= doing its job) with things, but I'll go back and review that.

> Users/groups with identifiers containing slashes cannot be modified
> -------------------------------------------------------------------
>
>                 Key: GUACAMOLE-1261
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-1261
>             Project: Guacamole
>          Issue Type: Bug
>          Components: guacamole
>            Reporter: David McDonald
>            Assignee: Nick Couchman
>            Priority: Minor
>             Fix For: 1.4.0
>
>
> When a forward slash in included in the name of a User Group, the hyperlink that is supposed direct the user to the settings page for that User Group is broken, redirecting the user to the main page. This is because the slash is not properly escaped in the URL, leading to it's interpretation as part of the path.
> Once this happens, the only way to delete/update that User Group is through deleting/updating its entry in the MySQL/Postgresql database directly. 
> This is likely present in other areas of the website, such as users, connections, etc. The most probable solution involves improving input validation through, for example, disallowing the use of forward slashes in names.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)