Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-10895

Missing encodeURIComponent in configuration.httpconf.edit.js.php

    XMLWordPrintable

    Details

      Description

      File 'include/views/js/configuration.httpconf.edit.js.php' builds a query string for 'popup_httpstep.php' using unencoded values for 'steps_names[]' array parameter.

      If a web step name has characters such as '&url=xxx', the corresponding parameter in this query string will be overwritten and the 'url' field will show 'xxx' instead of the actual step url.

      This can be fixed simply by adding 'encodeURIComponent' as shown in the attached patchfile.

      File: include/views/js/configuration.httpconf.edit.js.php
      Lines: 161 and 175

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            fernandosch Fernando Schmitt
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: