[jira] Resolved: (TRINIDAD-97) potential security violation in some error msgs

["Matthias Weßendorf (JIRA)" <de...@myfaces.apache.org>]

     [ https://issues.apache.org/jira/browse/TRINIDAD-97?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Matthias Weßendorf resolved TRINIDAD-97.
----------------------------------------

       Resolution: Fixed
    Fix Version/s: 1.0.2-core

> potential security violation in some error msgs
> -----------------------------------------------
>
>                 Key: TRINIDAD-97
>                 URL: https://issues.apache.org/jira/browse/TRINIDAD-97
>             Project: MyFaces Trinidad
>          Issue Type: Improvement
>    Affects Versions: 1.0.1-core
>            Reporter: Matthias Weßendorf
>            Assignee: Matthias Weßendorf
>            Priority: Critical
>             Fix For: 1.0.2-core
>
>
> Some of our error messages also show the user entered data.  However, if the
> field is an inputText with secure=true, this could lead to a security
> vulnerability.  The following error msgs are potential issues:
> org.apache.myfaces.trinidad.convert.FloatConverter.CONVERT_detail
> org.apache.myfaces.trinidad.convert.NumberConverter.CONVERT_PATTERN_detail
> org.apache.myfaces.trinidad.validator.RegExpValidator.NO_MATCH_detail
> org.apache.myfaces.trinidad.validator.DateRestrictionValidator.DAY_detail
> org.apache.myfaces.trinidad.validator.ByteLengthValidator.MAXIMUM_detail 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.