getavalon / core

The safe post-production pipeline - https://getavalon.github.io/2.0
MIT License
213 stars 48 forks source link

Project Manager allows to add assets with new line characters #534

Open BigRoy opened 4 years ago

BigRoy commented 4 years ago

What happened?

Somehow it's possible to add/create a new Avalon asset using the project manager that includes a new line character \n. It somehow manages to pass validation.

What did you expect?

This should never get through.

To Reproduce

E.g. copy past the text below including the new line:

invalid

Note how you can create an asset using this.

Additional context

It should not pass the schema.validate check which it magically does. Trying to create a name with a space in it does get captured correctly, however the schema does not invalidate a new line.

It only passes if the new line is at the end of the string. Even adding a space after it makes it fail.

Below examples are written with the escape characters explicitly written, when entering these in the asset name field copy pasting won't reproduce the same behavior. \n must be a new line, \t must be a tab (not spaces).

This incorrrectly passes validation: invalid\n

This is correctly disallowed: invalid\n (note space after \n) invalid\t invalid\naa \ninvalid \tinvalid

I'm not sure why it allows the \n at the end of the name.

davidlatwe commented 4 years ago

We may add a QtGui.QRegExpValidator into the asset label QLineEdit widget just like the one in the Creator App here.

But might need to pop an error message to indicate invalid found, because I imaging one would copy/paste the asset name from somewhere else, and pasting string that contains invalid character did not ring any bell by default and leave a user with a confused face.

11d9268a-3562-445a-b636-13db4a5695d0

davidlatwe commented 4 years ago

Here's a quick implementation I made:

a0385362-5aa9-49e4-ae6b-ee3bb628c0cd

BigRoy commented 4 years ago

Looking good. Is there any way to, e.g. on paste preserve all valid characters and just strip the invalid ones as opposed to pasting nothing at all?