← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1477822] [NEW] Too loose url regex for project/images/<instance-id>/create

 

Public bug reported:

How to reproduce:
Input a wrong url http://<horizon>/project/images/<instance-id>/createabcd into browser, it shows the view of creating snapshot instead of 404 as expect.

Root cause:
The current url regex '^(?P<instance_id>[^/]+)/create' is too loose, which will match all url start with 'create'.
https://git.openstack.org/cgit/openstack/horizon/tree/openstack_dashboard/dashboards/project/images/snapshots/urls.py#n27

** Affects: horizon
     Importance: Undecided
     Assignee: Lin Yang (lin-a-yang)
         Status: In Progress

** Changed in: horizon
     Assignee: (unassigned) => Lin Yang (lin-a-yang)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1477822

Title:
  Too loose url regex for project/images/<instance-id>/create

Status in OpenStack Dashboard (Horizon):
  In Progress

Bug description:
  How to reproduce:
  Input a wrong url http://<horizon>/project/images/<instance-id>/createabcd into browser, it shows the view of creating snapshot instead of 404 as expect.

  Root cause:
  The current url regex '^(?P<instance_id>[^/]+)/create' is too loose, which will match all url start with 'create'.
  https://git.openstack.org/cgit/openstack/horizon/tree/openstack_dashboard/dashboards/project/images/snapshots/urls.py#n27

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1477822/+subscriptions


Follow ups