Uploaded image for project: 'JBoss BRMS Platform'
  1. JBoss BRMS Platform
  2. RHBRMS-1267

File name validation broken

This issue belongs to an archived project. You can view it, but you can't modify it. Learn more

XMLWordPrintable

    • ER5
    • +
    • Hide
      Summary: Assets like projects and enumeration, and ids for groups, artifacts and versions can be created with invalid characters due to file name validation being broken. This causes follow on problems when using these assets or ids. Avoid the use of the following characters when creating and naming these assets: ,./><?:"|;'\[]{}=-_+()~`!@#$%^&*.

      Cause:

      Consequence:

      Fix:

      Result:
      Show
      Summary: Assets like projects and enumeration, and ids for groups, artifacts and versions can be created with invalid characters due to file name validation being broken. This causes follow on problems when using these assets or ids. Avoid the use of the following characters when creating and naming these assets: ,./><?:"|;'\[]{}=-_+()~`!@#$%^&*. Cause: Consequence: Fix: Result:

      Description of problem:
      There used to be file name validation. It doesn't work now. I was able to create an asset (project, enumeration) with name:
      ,./<>?:"|;'[]{}=-_+()~`!@#$%^&*
      Also, it is possible to use the following as group id, artifact id and version in the new project popup:
      ,./?:"|;'[]{}=-_+()~`!@#$%^*
      That popup checks only for <, > and &.

      Causes whole bunch of problems. For example, naming a drl file something/ results in a folder called something being created and a metafile editor being opened for .drl file.

      Version-Release number of selected component (if applicable):
      BR/PMS 6.0 ER2

        3. server log excerpt.log
          23 kB
          Zuzka Krejčová

              manstis@redhat.com Michael Anstis
              zkrejcov Zuzka Krejčová (Inactive)
              Archiver:
              rhn-support-ceverson Clark Everson
              Zuzka Krejčová Zuzka Krejčová (Inactive)
              Zuzka Krejčová Zuzka Krejčová (Inactive)
              Anne-Louise Tangring (Inactive), Cheng Zhang (Inactive), etirelli, Kris Verlaenen, Rajesh Rajasekaran, Vikram Goyal (Inactive), Zuzka Krejčová (Inactive)

                Created:
                Updated:
                Resolved:
                Archived: