Actions
Bug #7584
closedFilters allow illegal values and fail with 500 internal server error
Start date:
05/10/2022
Due date:
% Done:
100%
Estimated time:
To be discussed:
No
Description
When creating an advanced filter, it is possible to submit a rule which is not valid, e. g. Target.IP4 IN ["a"]. Such filters are successfully saved but when show view is accessed, the 500 internal server error is shown.
Related issues
Updated by Rajmund Hruška over 2 years ago
- Related to Bug #7571: XSS at stored filters added
Updated by Rajmund Hruška over 2 years ago
- Status changed from New to Resolved
- % Done changed from 0 to 100
So, the rules were only parsed but they were never compiled. I don't know if that was intentional, but I tried validating the rule by compiling it with IDEAFilterCompiler.
Updated by Rajmund Hruška over 2 years ago
- Status changed from Resolved to In Review
Merged into devel and deployed on mentat-alt.
Updated by Pavel Kácha over 2 years ago
- Target version changed from 2.10 to 2.9.1
Actions