[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-2936?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Chip Childers updated CLOUDSTACK-2936:
--------------------------------------

    Security: Public  (was: Non-Public)
    
> Disallow special characters on all text fields
> ----------------------------------------------
>
>                 Key: CLOUDSTACK-2936
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-2936
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the 
> default.) 
>          Components: UI
>    Affects Versions: 4.1.0, 4.2.0
>            Reporter: Brian Federle
>            Assignee: Brian Federle
>             Fix For: 4.1.1
>
>         Attachments: detail-view.png, instance-wizard-name.png, 
> instance-wizard-network.png, list-view.png, multi-edit.png, zone-wizard.png
>
>
> The following text fields need to be fixed to prevent XSS injection attacks: 
> - Zone wizard: Physical network name 
> - Instance wizard: New network name, instance name, group 
> - All multi-edit fields 
> - All list view 'edit' fields, found on global settings

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to