Efraim Lorenz Longkines
added a comment - - edited Initial fix for this was implemented in http://jira.codehaus.org/browse/REDBACK-275 (included in 1.2.7)
Latest community issue in Redback for this issue http://jira.codehaus.org/browse/REDBACK-276
Will be revising the validation used in every actions in the continuum to prevent invalid inputs like possible XSS attacks. I will just attach my patch after I'm done.
Efraim Lorenz Longkines
added a comment - Will be revising the validation used in every actions in the continuum to prevent invalid inputs like possible XSS attacks. I will just attach my patch after I'm done.
Will be adding additional validation for every action class' validation.xml and will be using regex to check if the user's input is not a possible XSS attack.
Efraim Lorenz Longkines
added a comment - - edited Will be adding additional validation for every action class' validation.xml and will be using regex to check if the user's input is not a possible XSS attack.
Maria Catherine Tan
added a comment - Applied patch in r1096681 with some modifications:
fixed validations in project group action and build definition action
fixed selenium scripts
Maria Catherine Tan
added a comment - r1101338
added validation in xmlrpc
fixed validation of artifactid in ConfigureAppearanceAction
removed regex validation of build agent description
Initial fix for this was implemented in http://jira.codehaus.org/browse/REDBACK-275 (included in 1.2.7)
Latest community issue in Redback for this issue http://jira.codehaus.org/browse/REDBACK-276