overlord-issues April 2013

overlord-issues@lists.jboss.org

1 participants
195 discussions

[JBoss JIRA] (GADGETS-50) Response time gadget does not appear to filter based on operation name

by Jeff Yu (JIRA)

[ https://issues.jboss.org/browse/GADGETS-50?page=com.atlassian.jira.plugin... ] Jeff Yu resolved GADGETS-50. ---------------------------- Resolution: Done > Response time gadget does not appear to filter based on operation name > ---------------------------------------------------------------------- > > Key: GADGETS-50 > URL: https://issues.jboss.org/browse/GADGETS-50 > Project: Gadget Server and Gadgets > Issue Type: Bug > Affects Versions: 1.0.0.M4 > Reporter: Gary Brown > Assignee: Jeff Yu > Fix For: 1.0.0.M5 > > > Using the orders example shipped with rtgov, I sent a number of submitOrder operations to the OrderService and then a makePayment operation before doing more submitOrders. > When I filtered based on the OrderService, it correctly removed the interactions related to the Logistics and Inventory services. However when I then tried to filter by operation, it didn't seem to have any effect. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

11 years, 2 months

1
0
0 / 0

[JBoss JIRA] (GADGETS-51) frame order shows fristly, and then disappear.

by Jeff Yu (JIRA)

[ https://issues.jboss.org/browse/GADGETS-51?page=com.atlassian.jira.plugin... ] Jeff Yu resolved GADGETS-51. ---------------------------- Resolution: Done > frame order shows fristly, and then disappear. > ---------------------------------------------- > > Key: GADGETS-51 > URL: https://issues.jboss.org/browse/GADGETS-51 > Project: Gadget Server and Gadgets > Issue Type: Bug > Affects Versions: 1.0.0.M4 > Reporter: Jeff Yu > Assignee: Jeff Yu > Fix For: 1.0.0.M5 > > Attachments: gs2.png > > > frame order shows fristly, and then disappear. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

11 years, 2 months

1
0
0 / 0

[JBoss JIRA] (GADGETS-51) frame order shows fristly, and then disappear.

by Jeff Yu (JIRA)

[ https://issues.jboss.org/browse/GADGETS-51?page=com.atlassian.jira.plugin... ] Jeff Yu updated GADGETS-51: --------------------------- Attachment: gs2.png > frame order shows fristly, and then disappear. > ---------------------------------------------- > > Key: GADGETS-51 > URL: https://issues.jboss.org/browse/GADGETS-51 > Project: Gadget Server and Gadgets > Issue Type: Bug > Affects Versions: 1.0.0.M4 > Reporter: Jeff Yu > Assignee: Jeff Yu > Fix For: 1.0.0.M5 > > Attachments: gs2.png > > > frame order shows fristly, and then disappear. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

11 years, 2 months

1
0
0 / 0

[JBoss JIRA] (GADGETS-51) frame order shows fristly, and then disappear.

by Jeff Yu (JIRA)

Jeff Yu created GADGETS-51: ------------------------------ Summary: frame order shows fristly, and then disappear. Key: GADGETS-51 URL: https://issues.jboss.org/browse/GADGETS-51 Project: Gadget Server and Gadgets Issue Type: Bug Affects Versions: 1.0.0.M4 Reporter: Jeff Yu Assignee: Jeff Yu Fix For: 1.0.0.M5 frame order shows fristly, and then disappear. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

11 years, 2 months

1
0
0 / 0

[JBoss JIRA] (SRAMP-178) Trusting MIME type sent from clients is dangerous

by Randall Hauch (JIRA)

[ https://issues.jboss.org/browse/SRAMP-178?page=com.atlassian.jira.plugin.... ] Randall Hauch commented on SRAMP-178: ------------------------------------- The Tika project has pretty good MIME type detection. ModeShape 3 abandoned our custom approach and are now just using Tika. > Trusting MIME type sent from clients is dangerous > ------------------------------------------------- > > Key: SRAMP-178 > URL: https://issues.jboss.org/browse/SRAMP-178 > Project: S-RAMP > Issue Type: Bug > Security Level: Public(Everyone can see) > Components: Client > Affects Versions: 0.1.1 > Reporter: Lukas Krejci > Assignee: Kurt Stam > Fix For: 0.2.0 - Milestone 4 > > > While uploading artifact to the repository, the S-RAMP server completely trusts the client with the supplied mime type and uses it from thereafter. > This also includes the time when the artifact is downloaded from S-RAMP server. > This is quite dangerous, IMHO, because it gives the potential attackers the means for making certain types of files look like something they aren't. This could be a nice vector to exploiting vulnerabilities in applications that then open such files. > For example, consider this command: > curl -H 'Content-Type: image/png' -H 'Slug: wha.pkg' --data-binary @tmp.pdf 'http://localhost:8080/s-ramp-server/s-ramp/core/Document' > This will create an artifact called "wha.pkg" in the repository, which will have the stored content type of "image/png" but the actual data will be a PDF. > IMHO, the mime type detection should be purely a server-side affair ignoring any hints of mimetype sent in by the clients. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira

11 years, 2 months

1
0
0 / 0

← Newer
1
...
17
18
19
20
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

overlord-issues April 2013