BUG?: Voucher Comment input: special character initiate pf sense Restore…



  • Today, i faced the following problem: i created a new roll for the voucher System and entered the character "á" in the comment field. The full comment was:"Rolle 4: 1000 Stk. á 1440 Minuten". After hitting Save, i got the following Acknowledge: Acknowledge All    .:.    07-16-12 11:30:13 - [config.xml]pfSense is restoring the configuration /cf/conf/backup/config-1342430963.xml    .:.    "

    i tested it again only containing the letter "á" and it happens again.

    a test withaut "á" won't cause this problem.

    i didn't know where can i fill a bug report, so i decided to post it here.

    Thanks.

    Edit:
    2.0.1-RELEASE (i386)
    built on Mon Dec 12 17:53:52 EST 2011
    FreeBSD 8.1-RELEASE-p6


  • Rebel Alliance Developer Netgate

    Sounds like we need to add some input validation, or a cdata escape.

    Open a ticket at http://redmine.pfsense.org/


Log in to reply