You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@archiva.apache.org by "Jevica Arianne B. Zurbano (JIRA)" <ji...@codehaus.org> on 2009/04/17 12:41:57 UTC

[jira] Created: (MRM-1173) Cannot delete patterns with single and double quotes.

Cannot delete patterns with single and double quotes.
-----------------------------------------------------

                 Key: MRM-1173
                 URL: http://jira.codehaus.org/browse/MRM-1173
             Project: Archiva
          Issue Type: Bug
          Components: remote proxy, repository scanning
    Affects Versions: 1.2
            Reporter: Jevica Arianne B. Zurbano


Add/edit Proxy Connector:
- Blacklist: cannot delete patterns with ' and "
- whitelist: cannot delete patterns with '


Repository Scanning:
- cannot delete patterns with ' and "

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Updated: (MRM-1173) Cannot delete patterns with single and double quotes.

Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
     [ https://jira.codehaus.org/browse/MRM-1173?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brett Porter updated MRM-1173:
------------------------------

    Fix Version/s:     (was: Backlog)
                   1.4-M1

This is a (very obscure) way to inject some code, for example: {{1', ''); alert('XSS'); setAndSubmit('pattern', '1}}



> Cannot delete patterns with single and double quotes.
> -----------------------------------------------------
>
>                 Key: MRM-1173
>                 URL: https://jira.codehaus.org/browse/MRM-1173
>             Project: Archiva
>          Issue Type: Bug
>          Components: remote proxy, repository scanning
>    Affects Versions: 1.2
>            Reporter: Jevica Arianne B. Zurbano
>             Fix For: 1.4-M1
>
>
> Add/edit Proxy Connector:
> - Blacklist: cannot delete patterns with ' and "
> - whitelist: cannot delete patterns with '
> Repository Scanning:
> - cannot delete patterns with ' and "

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Commented: (MRM-1173) Cannot delete patterns with single and double quotes.

Posted by "Olivier Lamy (JIRA)" <ji...@codehaus.org>.
    [ https://jira.codehaus.org/browse/MRM-1173?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=280571#comment-280571 ] 

Olivier Lamy commented on MRM-1173:
-----------------------------------

more an escape javascript issue

> Cannot delete patterns with single and double quotes.
> -----------------------------------------------------
>
>                 Key: MRM-1173
>                 URL: https://jira.codehaus.org/browse/MRM-1173
>             Project: Archiva
>          Issue Type: Bug
>          Components: remote proxy, repository scanning
>    Affects Versions: 1.2
>            Reporter: Jevica Arianne B. Zurbano
>            Assignee: Olivier Lamy
>             Fix For: 1.4-M1
>
>
> Add/edit Proxy Connector:
> - Blacklist: cannot delete patterns with ' and "
> - whitelist: cannot delete patterns with '
> Repository Scanning:
> - cannot delete patterns with ' and "

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Updated: (MRM-1173) Cannot delete patterns with single and double quotes.

Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/MRM-1173?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brett Porter updated MRM-1173:
------------------------------

    Fix Version/s: 1.x

> Cannot delete patterns with single and double quotes.
> -----------------------------------------------------
>
>                 Key: MRM-1173
>                 URL: http://jira.codehaus.org/browse/MRM-1173
>             Project: Archiva
>          Issue Type: Bug
>          Components: remote proxy, repository scanning
>    Affects Versions: 1.2
>            Reporter: Jevica Arianne B. Zurbano
>             Fix For: 1.x
>
>
> Add/edit Proxy Connector:
> - Blacklist: cannot delete patterns with ' and "
> - whitelist: cannot delete patterns with '
> Repository Scanning:
> - cannot delete patterns with ' and "

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Closed: (MRM-1173) Cannot delete patterns with single and double quotes.

Posted by "Olivier Lamy (JIRA)" <ji...@codehaus.org>.
     [ https://jira.codehaus.org/browse/MRM-1173?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Olivier Lamy closed MRM-1173.
-----------------------------

    Resolution: Fixed

fixed r1178794 and r1178795

> Cannot delete patterns with single and double quotes.
> -----------------------------------------------------
>
>                 Key: MRM-1173
>                 URL: https://jira.codehaus.org/browse/MRM-1173
>             Project: Archiva
>          Issue Type: Bug
>          Components: remote proxy, repository scanning
>    Affects Versions: 1.2
>            Reporter: Jevica Arianne B. Zurbano
>            Assignee: Olivier Lamy
>             Fix For: 1.4-M1
>
>
> Add/edit Proxy Connector:
> - Blacklist: cannot delete patterns with ' and "
> - whitelist: cannot delete patterns with '
> Repository Scanning:
> - cannot delete patterns with ' and "

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Assigned: (MRM-1173) Cannot delete patterns with single and double quotes.

Posted by "Olivier Lamy (JIRA)" <ji...@codehaus.org>.
     [ https://jira.codehaus.org/browse/MRM-1173?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Olivier Lamy reassigned MRM-1173:
---------------------------------

    Assignee: Olivier Lamy

> Cannot delete patterns with single and double quotes.
> -----------------------------------------------------
>
>                 Key: MRM-1173
>                 URL: https://jira.codehaus.org/browse/MRM-1173
>             Project: Archiva
>          Issue Type: Bug
>          Components: remote proxy, repository scanning
>    Affects Versions: 1.2
>            Reporter: Jevica Arianne B. Zurbano
>            Assignee: Olivier Lamy
>             Fix For: 1.4-M1
>
>
> Add/edit Proxy Connector:
> - Blacklist: cannot delete patterns with ' and "
> - whitelist: cannot delete patterns with '
> Repository Scanning:
> - cannot delete patterns with ' and "

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Work stopped: (MRM-1173) Cannot delete patterns with single and double quotes.

Posted by "Olivier Lamy (JIRA)" <ji...@codehaus.org>.
     [ https://jira.codehaus.org/browse/MRM-1173?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Work on MRM-1173 stopped by Olivier Lamy.

> Cannot delete patterns with single and double quotes.
> -----------------------------------------------------
>
>                 Key: MRM-1173
>                 URL: https://jira.codehaus.org/browse/MRM-1173
>             Project: Archiva
>          Issue Type: Bug
>          Components: remote proxy, repository scanning
>    Affects Versions: 1.2
>            Reporter: Jevica Arianne B. Zurbano
>            Assignee: Olivier Lamy
>             Fix For: 1.4-M1
>
>
> Add/edit Proxy Connector:
> - Blacklist: cannot delete patterns with ' and "
> - whitelist: cannot delete patterns with '
> Repository Scanning:
> - cannot delete patterns with ' and "

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Work started: (MRM-1173) Cannot delete patterns with single and double quotes.

Posted by "Olivier Lamy (JIRA)" <ji...@codehaus.org>.
     [ https://jira.codehaus.org/browse/MRM-1173?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Work on MRM-1173 started by Olivier Lamy.

> Cannot delete patterns with single and double quotes.
> -----------------------------------------------------
>
>                 Key: MRM-1173
>                 URL: https://jira.codehaus.org/browse/MRM-1173
>             Project: Archiva
>          Issue Type: Bug
>          Components: remote proxy, repository scanning
>    Affects Versions: 1.2
>            Reporter: Jevica Arianne B. Zurbano
>            Assignee: Olivier Lamy
>             Fix For: 1.4-M1
>
>
> Add/edit Proxy Connector:
> - Blacklist: cannot delete patterns with ' and "
> - whitelist: cannot delete patterns with '
> Repository Scanning:
> - cannot delete patterns with ' and "

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira