Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-10895

Missing encodeURIComponent in configuration.httpconf.edit.js.php

    Details

      Description

      File 'include/views/js/configuration.httpconf.edit.js.php' builds a query string for 'popup_httpstep.php' using unencoded values for 'steps_names[]' array parameter.

      If a web step name has characters such as '&url=xxx', the corresponding parameter in this query string will be overwritten and the 'url' field will show 'xxx' instead of the actual step url.

      This can be fixed simply by adding 'encodeURIComponent' as shown in the attached patchfile.

      File: include/views/js/configuration.httpconf.edit.js.php
      Lines: 161 and 175

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              fernandosch Fernando Schmitt
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: