• Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • core
    • None

      In Jenkins 1.480.2.1 it is possible to create a view called '..'. Since actions on a view include the view name in the URL, '..' being interpreted as directory traversal is an issue. As such, it is not possible to view, edit, or delete a view with this name via standard methods.

      To read more, see my post on StackOverflow.
      http://stackoverflow.com/questions/14445729/how-to-delete-a-view-named/

          [JENKINS-16608] View name allows '..'

          Code changed in jenkins
          User: Seiji Sogabe
          Path:
          changelog.html
          core/src/main/java/jenkins/model/Jenkins.java
          core/src/main/resources/hudson/model/Messages.properties
          core/src/main/resources/hudson/model/Messages_ja.properties
          test/src/test/java/hudson/model/ViewTest.java
          http://jenkins-ci.org/commit/jenkins/d8b29df3558724090efaf18326937075c25ba7f3
          Log:
          [FIXED JENKINS-16608] View name should not allow "..".


          You received this message because you are subscribed to the Google Groups "Jenkins Commits" group.
          To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-commits+unsubscribe@googlegroups.com.
          For more options, visit https://groups.google.com/groups/opt_out.

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Seiji Sogabe Path: changelog.html core/src/main/java/jenkins/model/Jenkins.java core/src/main/resources/hudson/model/Messages.properties core/src/main/resources/hudson/model/Messages_ja.properties test/src/test/java/hudson/model/ViewTest.java http://jenkins-ci.org/commit/jenkins/d8b29df3558724090efaf18326937075c25ba7f3 Log: [FIXED JENKINS-16608] View name should not allow "..". – You received this message because you are subscribed to the Google Groups "Jenkins Commits" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-commits+unsubscribe@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out .

          dogfood added a comment -

          Integrated in jenkins_main_trunk #2398
          [FIXED JENKINS-16608] View name should not allow "..". (Revision d8b29df3558724090efaf18326937075c25ba7f3)

          Result = SUCCESS
          Seiji Sogabe : d8b29df3558724090efaf18326937075c25ba7f3
          Files :

          • test/src/test/java/hudson/model/ViewTest.java
          • core/src/main/java/jenkins/model/Jenkins.java
          • core/src/main/resources/hudson/model/Messages_ja.properties
          • core/src/main/resources/hudson/model/Messages.properties
          • changelog.html

          dogfood added a comment - Integrated in jenkins_main_trunk #2398 [FIXED JENKINS-16608] View name should not allow "..". (Revision d8b29df3558724090efaf18326937075c25ba7f3) Result = SUCCESS Seiji Sogabe : d8b29df3558724090efaf18326937075c25ba7f3 Files : test/src/test/java/hudson/model/ViewTest.java core/src/main/java/jenkins/model/Jenkins.java core/src/main/resources/hudson/model/Messages_ja.properties core/src/main/resources/hudson/model/Messages.properties changelog.html

            sogabe sogabe
            jfairley Jeffrey Fairley
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: