yahoo-eng-team team mailing list archive

[Adam Gandelman <1370732@xxxxxxxxxxxxxxxxxx>]

** Also affects: horizon/juno
   Importance: Undecided
       Status: New

** Changed in: horizon/juno
   Importance: Undecided => Medium

** Changed in: horizon/juno
       Status: New => Fix Committed

** Changed in: horizon/juno
    Milestone: None => 2014.2.3

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1370732

Title:
  Image Create/Edit Description field cannot contain newlines

Status in OpenStack Dashboard (Horizon):
  Fix Released
Status in OpenStack Dashboard (Horizon) juno series:
  Fix Committed

Bug description:
  With the Glance v1 API, Horizon does no input sanitization on the
  Image Description field, so newlines in the Description will be sent
  along verbatim, breaking the session.

  A simple test case to reproduce:

  1.  Stand up a Devstack, login to Horizon, and go to the Project » Images page
  2.  Edit an image
  3.  Set the description to "foo\n\nbar" (i.e., "foo", two newlines, then "bar")
  4.  Set the name to "foo bar"

  Expected behaviour:

  The name of the image changes to "foo bar", and the description (on
  the Detail page) changes to "foo\n\nbar"

  Actual behaviour:

  The name is unchanged, and the description is set to "foo"  The
  glance-api session on Devstack will also report an HTTP 400 error.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1370732/+subscriptions