[
https://issues.jboss.org/browse/AS7-3168?page=com.atlassian.jira.plugin.s...
]
Rostislav Svoboda reopened AS7-3168:
------------------------------------
Hi Heiko.
If you are still objecting :), please at least check if the input is ASCII only - see for
example
http://stackoverflow.com/questions/3585053/in-java-is-it-possible-to-chec...
Enterprise solution should recover from such trivial attack. Currently you are forced to
shutdown the server and edit xml file to see properties again.
Another way should be to simulate native2ascii tool from JDK, check last 3 private methods
in
http://code.google.com/p/native2ascii/source/browse/trunk/src/cn/edu/buaa...
Failed to decode response: java.lang.IllegalStateException: Illegal
byte 195
When did it happen - when reading properties from model or when persisting
new property?
Admin console: issues with creation of system properties
--------------------------------------------------------
Key: AS7-3168
URL:
https://issues.jboss.org/browse/AS7-3168
Project: Application Server 7
Issue Type: Bug
Components: Console
Reporter: Jan Martiska
Assignee: Heiko Braun
Fix For: 7.1.0.Final
Admin console doesn't currently verify the property's name when creating a system
property. The creation will fail when it is sent to server, it should fail in the console
itself, because console can verify if property's name is invalid. Server side failure
should only occur when a property with the same name already exists.
Furthermore, it seems that in some scenarios, when you use an invalid name of a system
property, for example containing some national characters, such as ěščžěščřěščř, the
system property WILL get created (and will exist on the server), but the admin console
will be UNABLE to show any of the existing system properties - when you navigate to system
property page, it will show an empty table!!!! This will require deleting this property
using CLI before system property management can be used in admin console again.
This also happens if the property's value has national characters.
NOTE: other than system properties, this applies to OSGi framework properties and most
likely more property types as well.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see:
http://www.atlassian.com/software/jira