Bug 29254 – store returns html encoded values causing backend/frontend mismatch

Bug 29254 - store returns html encoded values causing backend/frontend mismatch


Summary:	store returns html encoded values causing backend/frontend mismatch

Status:	RESOLVED WONTFIX

Product:	UCS
Classification:	Unclassified
Component:	UMC (Generic)
Version:	UCS 4.1
Hardware:	Other Linux

Importance:	P4 normal (vote)
Target Milestone:	---
Assigned To:	UMC maintainers
QA Contact:

URL:
Keywords:

Duplicates:	26650 (view as bug list)
Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2012-11-16 10:15 CET by Philipp Hahn
Modified:	2019-01-03 07:23 CET (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.034
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	Troubleshooting
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Philipp Hahn

2012-11-16 10:15:13 CET

An Bug #27189 ist aufgefallen, daß das Grid (oder der Store) die id HTML-encodiert, was dann die Verwendung (ohne entsprechendes dekodieren) zerstört.

UVMM liest die Snapshots aus:
 # umc-command -U Administrator -P univention uvmm/snapshot/query -o 'domainURI=qemu://xen5.phahn.dev/system#35e24689-9d2c-ebfa-2109-52fbb4f4a73c'
16.11.12 09:49:11.249  DEBUG_INIT
Response: COMMAND
  data length   :  227
  message length:  150
  ---
  ARGUMENTS: uvmm/snapshot/query
MIMETYPE   : application/json
  STATUS   : 200
  MESSAGE  : None
  RESULT   : [{'time': '11/16/12 08:52:43', 'id': 'Bla & <test ;) > = " \' "', 'label': 'Bla & <test ;) > = " \' "'}]

Soweit ist alles okay. Beim Aufruf von umc/js/uvmm/SnapshotGrid.js#		_revertSnapshot(ids) bzw. #_deleteSnapshots(ids) wird dan allerdings als ids
  ["Bla &amp; &lt;test ;) > = " ' ""]
übergeben, d.h. aus dem Grid kommt die id dann plötzlich HTML-encodiert. Das anschließende UVMM-Kommando scheitert dann natürlich, weil es die falschen Daten übergeben bekommt.

Prinzipiell müsste das alle Stellen betreffen, in dem ein Grid benutzt wird, also nicht nur UVMM.

Als Workaround wurden jetzt in UVMM & und < verboten, bis dieser Bug gefixt wurde.

Comment 1 Florian Best

2014-01-14 08:41:18 CET

*** Bug 26650 has been marked as a duplicate of this bug. ***

Comment 2 Stefan Gohmann

2019-01-03 07:23:43 CET

This issue has been filled against UCS 4.1. The maintenance with bug and security fixes for UCS 4.1 has ended on 5st of April 2018.

Customers still on UCS 4.1 are encouraged to update to UCS 4.3. Please contact
your partner or Univention for any questions.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or simply reopen the issue. In this case please provide detailed information on how this issue is affecting you.