Forum

[SOLVED] View corru...
 
Notifications
Retirer tout

[SOLVED] View corrupted

6 Posts
2 Utilisateurs
0 Reactions
4,481 Vu
(@ade)
Posts: 45
Active Member
Début du sujet
 
[#5140]

Hi,

My view is sometime corrupted because :
- either the server answer html below, and projeqtor tries to display it in js (function checkAlertRetour(data) )
- either projetqtor display html tags stored in project follow up which corrupts the view (same html below can be used)

After some brief tests,
- link tag is not supported - it corrupts the view

not support html tags

Server answer :

For line below, I change character / into M

@charset "UTF-8";
[ng:cloak],
[ng-cloak],
[data-ng-cloak],
[x-ng-cloak],
.ng-cloak,
.x-ng-cloak,
.ng-hide:not(.ng-hide-animate) {
display: none !important;
}

ng:form {
display: block;
}

.ng-animate-shim {
visibility: hidden;
}

.ng-anchor {
position: absolute;
}

Oops, something lost

(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
m=s.getElementsByTagName(o)[0];a.async=1;a.src="g;m.parentNode.insertBefore(a,m)"
})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');

ga('create', 'UA-26575989-46', 'auto');
ga('send', 'pageview');

Oops, looks like the page is lost.

This is not a fault, just an accident that was not intentional.


 
Posté : 6 Mai AM 11:055
(@babynus)
Posts: 14952
Membre Admin
 

Hi,

The html code you show is not part of ProjeQtOr.
Check out with your web hoster what the issue is (maybe it's a generic message when host is over loaded)


 
Posté : 6 Mai PM 12:055
(@ade)
Posts: 45
Active Member
Début du sujet
 

Hi,

i change the code

function checkAlertRetour(data) {
if (data) {
data=data.replace(/http/gi, "bbbb");


 
Posté : 6 Mai PM 13:055
(@babynus)
Posts: 14952
Membre Admin
 

Hi,

i change the code

function checkAlertRetour(data) {
if (data) {
data=data.replace(/http/gi, "bbbb");

And ?


 
Posté : 6 Mai PM 14:055
(@ade)
Posts: 45
Active Member
Début du sujet
 

Hi,

for my issue, changing the code solves my issue (Too difficult to change my web hoster)

this problem intrigued me and I read some hacking problem related to the fact what happens if when basic users are allowed to change the behavior of html page.

the basic example i just learned XSS / Cross-Site Scripting

you put upper text in project Activity Stream and then
- no one can access to project/task ... the page jumps to www.hacking-site.com
- the cookies and forwarded to the page

variation of the issue, more subtil, ask a user to enter his password

please enter your name:

and your password:

hope it helps you


 
Posté : 6 Mai PM 20:055
(@babynus)
Posts: 14952
Membre Admin
 

Hi,

Thanks for highlighting this security leak
We'll soon fix it in coming patch (V7.0.7)


 
Posté : 6 Mai PM 21:055
Share:
Retour en haut