Bug #7584
closed
Filters allow illegal values and fail with 500 internal server error
Added by Rajmund Hruška almost 2 years ago.
Updated almost 2 years ago.
Category:
Development - GUI
Description
When creating an advanced filter, it is possible to submit a rule which is not valid, e. g. Target.IP4 IN ["a"]. Such filters are successfully saved but when show view is accessed, the 500 internal server error is shown.
- Related to Bug #7571: XSS at stored filters added
- Status changed from New to Resolved
- % Done changed from 0 to 100
So, the rules were only parsed but they were never compiled. I don't know if that was intentional, but I tried validating the rule by compiling it with IDEAFilterCompiler.
- Status changed from Resolved to In Review
Merged into devel and deployed on mentat-alt.
- Target version changed from 2.10 to 2.9.1
- Status changed from In Review to Closed
Also available in: Atom
PDF