Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-10895

Missing encodeURIComponent in configuration.httpconf.edit.js.php

XMLWordPrintable

      File 'include/views/js/configuration.httpconf.edit.js.php' builds a query string for 'popup_httpstep.php' using unencoded values for 'steps_names[]' array parameter.

      If a web step name has characters such as '&url=xxx', the corresponding parameter in this query string will be overwritten and the 'url' field will show 'xxx' instead of the actual step url.

      This can be fixed simply by adding 'encodeURIComponent' as shown in the attached patchfile.

      File: include/views/js/configuration.httpconf.edit.js.php
      Lines: 161 and 175

        1. patch.txt
          0.4 kB
          Fernando Schmitt

            Unassigned Unassigned
            fernandosch Fernando Schmitt
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: