NOTE: If you are a developer, please use a private wiki based on foswiki/trunk on a daily base ...or use trunk.foswiki.org to view this page for some minimal testing.
Use Item9693 for docu changes for 1.2 and 2.0.
You are here: Foswiki>Tasks Web>Component>FoswikiUIRegister>Item11501 (11 Apr 2012, GeorgeClark) Edit this topic text (e) Attach an image or document to this topic; manage existing attachments (a) View sequential topic history View without formatting (v) Create new topic Printable version of this topic (p) More: delete or rename this topic; set parent topic; view and compare revisions (m)

Item11501: User registration needs mechanism to validate form fields

Priority: CurrentState: AppliesTo: Component: WaitingFor:
Urgent Closed Engine FoswikiUIRegister, TopicUserMappingContrib  
ALERT! See SecurityAlert-CVE-2012-1004 for important information about this task

The form fields submitted during registration other than those validated as part of the registration process - FirstName, LastName, Login name, wikiname, etc. are not validated.

This is really an enhancement, but is marked urgent.

  • add a validateRegistrationField function to Users.pm
    • Called with fieldname, fieldvalue
    • Returns sanitized field, or can throw oops.
  • Provide basic validation in Users.pm if not implemented in the mapper.

Register.pm should call this routine for each field in the query prior to allowing the registration to proceed.

-- GeorgeClark - 03 Feb 2012

See also: Support.SecurityAlert-CVE-2012-1004, and Item11498

-- PaulHarvey - 04 Feb 2012
 

ItemTemplate edit

Summary User registration needs mechanism to validate form fields
ReportedBy GeorgeClark
Codebase 1.1.4, 1.1.4 RC2, 1.1.4 RC1, 1.1.4 beta2, 1.1.4 beta1, 1.1.3, 1.1.3 RC1, 1.1.3 beta1, 1.1.2, 1.1.1, 1.1.0, 1.1.0 beta1, 1.0.10, trunk
SVN Range
AppliesTo Engine
Component FoswikiUIRegister, TopicUserMappingContrib
Priority Urgent
CurrentState Closed
WaitingFor
Checkins Foswikirev:13904 Foswikirev:13905 Foswikirev:13907 Foswikirev:13909 Foswikirev:13910 Foswikirev:13913 Foswikirev:13915 Foswikirev:13916 Foswikirev:13922 Foswikirev:13923 Foswikirev:13924 Foswikirev:13925
TargetRelease patch
ReleasedIn 1.1.5
CheckinsOnBranches Release01x01 trunk
trunkCheckins Foswikirev:13913 Foswikirev:13915 Foswikirev:13923 Foswikirev:13924
Release01x01Checkins Foswikirev:13904 Foswikirev:13905 Foswikirev:13907 Foswikirev:13909 Foswikirev:13910 Foswikirev:13916 Foswikirev:13922 Foswikirev:13925
Edit | Attach | Print version | History: r17 < r16 < r15 < r14 | Backlinks | View wiki text | Edit wiki text | More topic actions
Topic revision: r17 - 11 Apr 2012, GeorgeClark
 
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. see CopyrightStatement. Creative Commons LicenseGet Foswiki at sourceforge.net. Fast, secure and Free Open Source software downloads