Uploaded image for project: 'Nuxeo Studio'
  1. Nuxeo Studio
  2. NXS-5365

Accent character in cookie prevents loading any NOS page

    XMLWordPrintable

    Details

      Description

      Overview

      Control character in cookie value or attribute.

      1. Go to project "Comité des Engagements" (https://connect.nuxeo.com/nuxeo/site/studio/ide?project=comite-engagement)
      2. Observe that there is a yellow banner in the header warning that the project will be expired in 10 days
      3. Click the check mark on the right side of the banner
      4. Reload the page
      5. The page cannot be loaded anymore, any other pages starting with https://connect.nuxeo.com cannot be loaded neither

      Exception in the server:

      2019-06-20 10:42:22,830 ERROR [http-bio-0.0.0.0-8186-exec-4187] [org.apache.coyote.http11.Http11Processor] Error processing request
      java.lang.IllegalArgumentException: Control character in cookie value or attribute.
      

      More detail is described in NCO-2710.

      Cause

      Banner set a non-normalized character 'é' in the cookie. The server failed to handle that.

      Cookie: ...; ...; subscription-remainder-Comité des Engagements=Fri, 21 Jun 2019 11:06:07 GMT
      

      Impact

      For any user having special characters in its project name and the project is closing to expiration, after clicking the check mark icon, entire NOS website is unavailable for them.

      Proposals

      Implement both:

      • Escape character
      • Use project id instead of project name

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 4 hours
                4h

                  PagerDuty