search

ziyi105 / pe

0 stars 0 forks source link

editprofile accepts unreasonable height #2

Open ziyi105 opened 9 months ago

ziyi105 commented 9 months ago

image.png

unreasonable height of 800cm is accepted, but height of 80000000 is rejected. Maybe you could lower the limit for height parameter to prevent user from accidentally input wrong height?

soc-pe-bot commented 9 months ago

Team's Response

Thank you for the report. It was ambiguous to set max limits for values, but we agree that 800cm is too large.

Items for the Tester to Verify

:question: Issue response

Team chose [response.NotInScope]

Reason for disagreement: The team did not provide the reason why this issue is not in scope. Since the application can reject height of 80000000, this means that there is a mechanism in the code that checks whether the height value exceed a certain value. This indicates that the developer did set a limit to the height value, but the value is not carefully chosen and is still too large. Hence, it is an oversight of the developer to set the limit to be too large.