Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-10895

Missing encodeURIComponent in configuration.httpconf.edit.js.php

    XMLWordPrintable

Details

    Description

      File 'include/views/js/configuration.httpconf.edit.js.php' builds a query string for 'popup_httpstep.php' using unencoded values for 'steps_names[]' array parameter.

      If a web step name has characters such as '&url=xxx', the corresponding parameter in this query string will be overwritten and the 'url' field will show 'xxx' instead of the actual step url.

      This can be fixed simply by adding 'encodeURIComponent' as shown in the attached patchfile.

      File: include/views/js/configuration.httpconf.edit.js.php
      Lines: 161 and 175

      Attachments

        Activity

          People

            Unassigned Unassigned
            fernandosch Fernando Schmitt
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: