Issue 2551165: @filter in web interface should validate fieldnames

classification

Title:	@filter in web interface should validate fieldnames
Type:	behavior	Severity:	minor
Components:	Web interface	Versions:

process

Status:	new	Resolution:
Dependencies		Superseder:
Assigned To:		Nosy List:	rouilj
Priority:		Keywords:

Created on 2021-10-06 19:23 by rouilj, last changed 2021-10-06 19:23 by rouilj.

Messages
msg7347	Author: [hidden] (rouilj)	Date: 2021-10-06 19:23
Using a bad field in the @filter parameter doesn't return an error. E.G. https://issues.roundup-tracker.org/issue?@filter=id&id=2551163 returns one entry. While https://issues.roundup-tracker.org/issue?@filter=i&id=2551163 returns all records. It should return an error/warning: Issue class has no property 'i'. Ignored in filter. See also issue2551164 for the xmlrpc equivalent.

msg7347

Author: [hidden] (rouilj)

Date: 2021-10-06 19:23

Using a bad field in the @filter parameter doesn't return an error.

E.G. https://issues.roundup-tracker.org/issue?@filter=id&id=2551163
returns one entry.

While https://issues.roundup-tracker.org/issue?@filter=i&id=2551163

returns all records.

It should return an error/warning:

    Issue class has no property 'i'. Ignored in filter.


See also issue2551164 for the xmlrpc equivalent.

History
Date	User	Action	Args
2021-10-06 19:23:46	rouilj	create

Roundup Tracker - Issues

Issue 2551165