Comments (1)
I finally merged this, hopefully it's better now.
On Sat, Jan 31, 2015 at 11:25 AM, kb [email protected] wrote:
I'm experiencing the following after applying the changes to remedy XSS
found in commit 57f9ff7
57f9ff7
:If viewing results in non-grid view, clicking on Info causes a "JSON error
parsing response: [object Object]" error in the browser, and the web log
has the following:"
ERROR ... elsa/web/lib/View.pm (161) View::catch ...
... Invalid JSON args ...
'q' => '...b.a.s.e.6.4..b.a.s.e.6.4... ...b.a.s.e.6.4..b.a.s.e.6.4.....=='
... invalid character encountered while parsing JSON string, at character
offset ...
... at /usr/local/elsa/web/lib/Controller.pm line 1914.
... at /usr/local/elsa/web/lib/Controller.pm line 1916"
It's breaking at line 1910, within of Controller.pm:
$decode = $self->json->decode(decode_base64($args->{q}));
The base64 encoded sData coming from the browser has a space in it.
Running the version of elsa.js before this fix has a plus sign instead.I was able to solve my problem by adding "$args->{q} =~ s/ /+/g;" near the
top of subroutine get_log_info:
sub get_log_info {
my ($self, $args, $cb) = @_;
my $user = $args->{user};
$args->{q} =~ s/ /+/g; ### <----- NEW LINE OF CODEmy $decode;
eval {
$decode = $self->json->decode(decode_base64($args->{q}));
};I created a pull request, but I'm not sure if it's the best solution, or
place for the solution.—
Reply to this email directly or view it on GitHub
#5.
from elsa.
Related Issues (20)
- datasource:_node_stats Shows Data in Future
- Multiple class search result export to excel does not work.
- Cannot start web interface HOT 1
- Add Support for Arch Linux in install file
- groupby Value Empty HOT 3
- apache2-mpm-prefork HOT 2
- CentOS 7 Apache Config
- Strange results from elsa queries HOT 1
- Upgrade Sandbox Connector from 1.0 to 1.5
- Large offset in ELSA query
- Remove old "get_elsa" googlecode portion of install.sh HOT 1
- Remove/rework set_version portion of install.sh related to google code?
- Check that $TMP_DIR is not mounted noexec
- Field missing in the Web interface the firt time is loaded HOT 2
- Database missing tables
- MySQL problem I guess HOT 3
- Problem correlating results in a subsearch
- install.sh doesn't work on debian stretch.
- Elsa PostgreSQL support HOT 4
- Dashboard still requires credentials HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from elsa.