yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #35724
[Bug 1477822] [NEW] Too loose url regex for project/images/<instance-id>/create
Public bug reported:
How to reproduce:
Input a wrong url http://<horizon>/project/images/<instance-id>/createabcd into browser, it shows the view of creating snapshot instead of 404 as expect.
Root cause:
The current url regex '^(?P<instance_id>[^/]+)/create' is too loose, which will match all url start with 'create'.
https://git.openstack.org/cgit/openstack/horizon/tree/openstack_dashboard/dashboards/project/images/snapshots/urls.py#n27
** Affects: horizon
Importance: Undecided
Assignee: Lin Yang (lin-a-yang)
Status: In Progress
** Changed in: horizon
Assignee: (unassigned) => Lin Yang (lin-a-yang)
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1477822
Title:
Too loose url regex for project/images/<instance-id>/create
Status in OpenStack Dashboard (Horizon):
In Progress
Bug description:
How to reproduce:
Input a wrong url http://<horizon>/project/images/<instance-id>/createabcd into browser, it shows the view of creating snapshot instead of 404 as expect.
Root cause:
The current url regex '^(?P<instance_id>[^/]+)/create' is too loose, which will match all url start with 'create'.
https://git.openstack.org/cgit/openstack/horizon/tree/openstack_dashboard/dashboards/project/images/snapshots/urls.py#n27
To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1477822/+subscriptions
Follow ups