Cannot populate IF-MAP server i f resource contains character '<' or '>'
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Juniper Openstack |
Fix Released
|
Critical
|
Unassigned | ||
OpenContrail |
Fix Released
|
Critical
|
Unassigned |
Bug Description
Cannot populate IF-MAP server if resource name contains character '<' or '>'.
The bug is more critical since the R1.10 release because the IF-MAP server is populated in one request. So all resources are not initialized if that request fail.
Reproduce it:
- When a config node running, create a virtual network with name "<script>
- Restart the config node: restart contrail-api
- Check the IF-MAP population: python /usr/lib/
MAP server connection = 127.0.0.1:8443
MAP server credentials = reader:reader
Start node = None
Skip List = ['id-perms']
Verbose = 0
The IF-MAP server is not populated. And we can see an error into irond logs:
[Fatal Error] :4:166: The value of attribute "name" associated with an element type "null" must not contain the '<' character.
Changed in opencontrail: | |
importance: | Undecided → Critical |
Changed in juniperopenstack: | |
importance: | Undecided → Critical |
tags: | added: config |
Changed in juniperopenstack: | |
status: | New → Fix Released |
Changed in opencontrail: | |
status: | New → Fix Released |
I think, it is already fixed.
Tested with contrail 1.2
saju@myuuhost:~$ neutron net-create "<script> alert(1) ;</script> " NeutronError' : {u'message': u"HTTP Status: 400 Content: Bad Request, name has one of invalid chars set([':', '<', '>'])", u'type': u'ContrailBadRe questError' , u'detail': u''}}
400-{u'