Bug 8108 - No check for validity of user input in VSM/Subclusters
Summary: No check for validity of user input in VSM/Subclusters
Status: NEW
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: Web Administration (show other bugs)
Version: trunk
Hardware: Other Other
: P2 Normal
Target Milestone: LowPrio
Assignee: Bugzilla mail exporter
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-03-02 12:43 CET by Alexander Zeijlon
Modified: 2023-03-23 11:23 CET (History)
0 users

See Also:
Acceptance Criteria:


Attachments

Description Alexander Zeijlon cendio 2023-03-02 12:43:18 CET
In the pop-ups in VSM/Subclusters in Web Admin, there are three input text fields, Agents, Users and Groups where we ask for input in the form of a space separated list of string values.

These inputs are as far as I know not validated for correctness and hence admins can input invalid users, groups and hostnames. It could therefore be a good idea to replace these inputs with option-selection blocks, which semi-requires validation through tlwa_types.

We already have a way of validating user- and group-names, and we could also add validation for formats of IP-addresses and hostnames.

Note You need to log in before you can comment on or make changes to this bug.