Edgewall Software
Modify ↓

Opened 11 months ago

#13703 new defect

Links to manage ticket property broken for the property containing `//`, `/./`, `/../`, forwarded-`/` or trailing-`/`

Reported by: Jun Omae Owned by:
Priority: normal Milestone: 1.6.1
Component: ticket system Version:
Severity: normal Keywords:
Cc: Branch:
Release Notes:
API Changes:
Internal Changes:

Description

How to reproduce

  1. Visit /admin/ticket/milestones page
  2. Add foo//bar as new milestone
  3. Milestone foo//bar is created but the link is /admin/ticket/milestones/foo/bar showing 404 error

The same issue occurs for the ticket properties containing //, /./, /../, forwarded-/ and trailing-/. Also, the link to milestone page /milestone/<name> is broken too.

I think we should prevent new ticket property containing the wrong patterns in ticket admin page.

See also: #3702, #10048, #10480

Attachments (0)

Change History (0)

Modify Ticket

Change Properties
Set your email in Preferences
Action
as new The ticket will remain with no owner.
The ticket will be disowned.
as The resolution will be set. Next status will be 'closed'.
The owner will be changed from (none) to anonymous. Next status will be 'assigned'.

Add Comment
E-mail address and name can be saved in the Preferences .
Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.