You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ofbiz.apache.org by "Xin Wang (Jira)" <ji...@apache.org> on 2021/06/06 01:33:00 UTC
[jira] [Comment Edited] (OFBIZ-12249) Unexpected decoding of url
encoded textarea data after submission
[ https://issues.apache.org/jira/browse/OFBIZ-12249?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17358005#comment-17358005 ]
Xin Wang edited comment on OFBIZ-12249 at 6/6/21, 1:32 AM:
-----------------------------------------------------------
Hi Jacques,
Thank you for your patch!
`example.com' is a valid domain, so it can pass UrlValidator for that case.
But as `noteInfo' is a free-form textarea field, users can add more text around url, which I think is quite valid from view of users, but will be rejected by OFBiz, e.g.:
blah blah blah ... see https://example.com/a%20link and related ...
was (Author: dram):
Hi Jacques,
Thank you for your patch!
`example.com' is a valid domain, so it can pass UrlValidator for that case.
But as `noteInfo' is a free-form textarea field, users can add more text around url, which I think is quite valid from view of users, but will be rejected by OFBiz:
blah blah blah ... see https://example.com/a%20link and related ...
> Unexpected decoding of url encoded textarea data after submission
> ------------------------------------------------------------------
>
> Key: OFBIZ-12249
> URL: https://issues.apache.org/jira/browse/OFBIZ-12249
> Project: OFBiz
> Issue Type: Bug
> Affects Versions: Trunk
> Reporter: Xin Wang
> Priority: Major
> Attachments: OFBIZ-12249.patch
>
>
> When trying to add a note to WorkEffort entity, I found that url encoded characters are unescaped, which is not expected.
> e.g.:
> 1. Go to page: https://demo-trunk.ofbiz.apache.org/workeffort/control/EditWorkEffortNotes?workEffortId=TASK01
> 2. Add a note with content: https://example.com/a%20link
> 3. After submission, it will turned to be: https://example.com/a link
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)