[ZBX-10895] Missing encodeURIComponent in configuration.httpconf.edit.js.php Created: 2016 Jun 10  Updated: 2017 May 30  Resolved: 2016 Jun 29

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Frontend (F)
Affects Version/s: 3.0.2, 3.0.3
Fix Version/s: 3.0.4rc1, 3.2.0alpha1

Type: Incident report Priority: Trivial
Reporter: Fernando Schmitt Assignee: Unassigned
Resolution: Fixed Votes: 0
Labels: frontend, patch, webmonitoring
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: Text File patch.txt    

 Description   

File 'include/views/js/configuration.httpconf.edit.js.php' builds a query string for 'popup_httpstep.php' using unencoded values for 'steps_names[]' array parameter.

If a web step name has characters such as '&url=xxx', the corresponding parameter in this query string will be overwritten and the 'url' field will show 'xxx' instead of the actual step url.

This can be fixed simply by adding 'encodeURIComponent' as shown in the attached patchfile.

File: include/views/js/configuration.httpconf.edit.js.php
Lines: 161 and 175



 Comments   
Comment by vitalijs.cemeris (Inactive) [ 2016 Jun 22 ]

(1) No translation strings changed.

iivs CLOSED

Comment by vitalijs.cemeris (Inactive) [ 2016 Jun 22 ]

Fixed in development branch svn://svn.zabbix.com/branches/dev/ZBX-10895

Comment by Ivo Kurzemnieks [ 2016 Jun 22 ]

TESTED

Comment by vitalijs.cemeris (Inactive) [ 2016 Jun 27 ]

Fixed in:

  • pre-3.0.4rc1 r60742
  • pre-3.1.0 r60743
Generated at Sat Apr 20 13:40:32 EEST 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.