toddyo / pwm

Automatically exported from code.google.com/p/pwm
0 stars 0 forks source link

helpdesk-detail.jsp: can't change password when distinguishedName contains apostrophe #703

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1.Have a distinguishedName with an apostrophe in it
2.Try to change the password for the user using the helpdesk
3.Validation for the password breaks with a javascript error

What is the expected output? What do you see instead?
Expect to see the validation checking the password. Nothing actually happens 
due to the javascript error when calling the function validatePasswords()

What version of PWM are you using?
v1.7.1 b1232 (Release)

What ldap directory and version are you using?
Active Directory

How to fix:
Instead of escaping single quotes (\') in the validatePassword() function to 
wrap the retrieved distinguishedName value, use the HTML codes for single 
(') or double quotes ("). In our case we used double quotes to get the 
function to run.

File to change:
helpdesk-detail.jsp

Lines to change: 408 and 416

Original issue reported on code.google.com by naosh...@gmail.com on 29 Jul 2015 at 12:49