Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-16608

View name allows '..'

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • core
    • None

      In Jenkins 1.480.2.1 it is possible to create a view called '..'. Since actions on a view include the view name in the URL, '..' being interpreted as directory traversal is an issue. As such, it is not possible to view, edit, or delete a view with this name via standard methods.

      To read more, see my post on StackOverflow.
      http://stackoverflow.com/questions/14445729/how-to-delete-a-view-named/

            sogabe sogabe
            jfairley Jeffrey Fairley
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: