Project

General

Profile

Actions
Copy link

Bug #35977

closed

Host list interpretes HTML from comment-field

Added by Markus Bucher almost 2 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
High
Assignee:
-
Category:
Inventory
Target version:
3.5.2
Difficulty:
Triaged:
Yes
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman/pull/9592, https://github.com/theforeman/foreman/pull/9600, https://github.com/theforeman/foreman/pull/9598, https://github.com/theforeman/foreman/pull/9599
Fixed in Releases:
3.4.2, 3.5.2, 3.6.0
Found in Releases:
Red Hat JIRA:

Description

Host index page was found to interpret HTML-code written into a host's comment-field.

Since the Host-detail page shows the HTML-code as text, the index-page should do the same thing (also to avoid potential malicous values).

Actions
Copy link
 #1

Updated by The Foreman Bot almost 2 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/9592 added
Actions
Copy link
 #2

Updated by The Foreman Bot almost 2 years ago

  • Fixed in Releases 3.6.0 added
Actions
Copy link
 #3

Updated by Ewoud Kohl van Wijngaarden almost 2 years ago

  • Target version set to 3.5.2
Actions
Copy link
 #4

Updated by Markus Bucher almost 2 years ago

  • Status changed from Ready For Testing to Closed
Actions
Copy link
 #5

Updated by The Foreman Bot almost 2 years ago

  • Pull request https://github.com/theforeman/foreman/pull/9598 added
Actions
Copy link
 #6

Updated by The Foreman Bot almost 2 years ago

  • Pull request https://github.com/theforeman/foreman/pull/9599 added
Actions
Copy link
 #7

Updated by The Foreman Bot almost 2 years ago

  • Pull request https://github.com/theforeman/foreman/pull/9600 added
Actions
Copy link
 #8

Updated by The Foreman Bot almost 2 years ago

  • Fixed in Releases 3.4.2 added
Actions
Copy link
 #9

Updated by The Foreman Bot almost 2 years ago

  • Fixed in Releases 3.5.2 added
Actions
Copy link
 #10

Updated by Ewoud Kohl van Wijngaarden almost 2 years ago

  • Category set to Inventory
  • Triaged changed from No to Yes
Actions
Copy link

Also available in: Atom PDF