Disabled permission tooltips broken on Chrome

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Minor
    • Component/s: matrix-auth-plugin
    • None
    • Environment:
      matrix-auth:2.6.2
    • matrix-auth-3.1.1

      When a permission is implied by another one (e.g. Run/Reply implied by Job/Configure), the disabled tooltip is using the attribute "title" and will display an information that is not un-escaped.

      Introduced during SECURITY-1909.

        1. matrix-auth_2.6.1_disabled.png
          matrix-auth_2.6.1_disabled.png
          7 kB
        2. matrix-auth_2.6.1_enabled.png
          matrix-auth_2.6.1_enabled.png
          2 kB
        3. matrix-auth_2.6.2_disabled.png
          matrix-auth_2.6.2_disabled.png
          15 kB
        4. matrix-auth_2.6.2_enabled.png
          matrix-auth_2.6.2_enabled.png
          2 kB

            Assignee:
            Daniel Beck
            Reporter:
            Wadeck Follonier
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: