Skip to:

Skip to Jira Navigation
Skip to Side Navigation
Skip to Main Content

mask ) ] } in regexp to prevent SQL injection

Description

None

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Linked issues

blocks

Searching by Close Parens Generates Error

PO with a POL whose productID has a paren, copied/edited from Instance cannot be saved

relates to

CQL identifiers=")" fails with "invalid regular expression: parentheses () not balanced" SQL Injection

Search for titles with value with parenthesis results in error messages when search term: All (title, contributor, identifier)

Fix URL encoding in BuildCQL preventing CQL injection

Checklist

hide

TestRail: Results

Activity

Show:

Done

Details
Assignee
Julian Ladisch
Reporter
Julian Ladisch
Tester Assignee
Adam Dickmeiss
Labels
platform-backlogsecurity
Priority
TBD
Story Points
0.5
Sprint
None
Development Team
Core: Platform
Fix versions
25.0.0
TestRail: Cases
Open TestRail: Cases
TestRail: Runs
Open TestRail: Runs

Created June 6, 2019 at 2:56 PM

Updated February 18, 2021 at 2:24 PM

Resolved June 6, 2019 at 4:43 PM

TestRail: Cases

TestRail: Runs