We should sanitize all values from the URL generated in the advanced bug search form.
Bug #40321 reported by
Diogo Matsubara
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Launchpad itself |
Fix Released
|
Medium
|
Brad Bollenbach | ||
Bug Description
If someone manually change values in the URL for invalid values, we'll see oops like this:
OOPS-109A101
or this:
OOPS-112D191
| Changed in malone: | |
| status: | Unconfirmed → Confirmed |
Revision history for this message
| Björn Tillenius (bjornt) wrote | #1 |
| description: | updated |
| Changed in malone: | |
| assignee: | nobody → bradb |
| status: | Confirmed → In Progress |
Revision history for this message
| Diogo Matsubara (matsubara) wrote | #2 |
Revision history for this message
| Brad Bollenbach (bradb) wrote Re: [Bug 40321] Re: We should sanitize all values from the URL generated in the advanced bug search form. | #3 |
Revision history for this message
| Diogo Matsubara (matsubara) wrote Re: [Bug 40321] Re: [Bug 40321] Re: We should sanitize all values from the URL generated in the advanced bug search form. | #4 |
| Changed in malone: | |
| status: | In Progress → Fix Committed |
| Changed in malone: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
FWIW, someone probably had the URL causing the OOPS as a bookmark. We used to have the statuses 'New' and 'Accepted'.