From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 881C06B393 for ; Tue, 26 Jan 2021 10:55:11 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 7946814ADB for ; Tue, 26 Jan 2021 10:54:41 +0100 (CET) Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com [212.186.127.180]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id 6180114ACF for ; Tue, 26 Jan 2021 10:54:40 +0100 (CET) Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1]) by proxmox-new.maurer-it.com (Proxmox) with ESMTP id 26FFA4193D for ; Tue, 26 Jan 2021 10:54:40 +0100 (CET) Date: Tue, 26 Jan 2021 10:54:39 +0100 From: Wolfgang Bumiller To: Oguz Bektas Cc: pbs-devel@lists.proxmox.com Message-ID: <20210126095439.com2royo6l2hs7sw@wobu-vie.proxmox.com> References: <20210119133323.1420136-1-o.bektas@proxmox.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20210119133323.1420136-1-o.bektas@proxmox.com> User-Agent: NeoMutt/20180716 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.046 Adjusted score from AWL reputation of From: address KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_DNSWL_MED -2.3 Sender listed at https://www.dnswl.org/, medium trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: [pbs-devel] applied: [PATCH proxmox-backup] ui: add missing uri encoding in user edit and view X-BeenThere: pbs-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Backup Server development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Jan 2021 09:55:11 -0000 applied On Tue, Jan 19, 2021 at 02:33:23PM +0100, Oguz Bektas wrote: > userid parameter needs to be properly encoded when shown on the browser > > Signed-off-by: Oguz Bektas > --- > www/config/UserView.js | 2 ++ > www/window/UserEdit.js | 2 +- > 2 files changed, 3 insertions(+), 1 deletion(-) > > diff --git a/www/config/UserView.js b/www/config/UserView.js > index 4645737a..ae313776 100644 > --- a/www/config/UserView.js > +++ b/www/config/UserView.js > @@ -139,6 +139,8 @@ Ext.define('PBS.config.UserView', { > xtype: 'proxmoxStdRemoveButton', > baseurl: '/access/users/', > enableFn: (rec) => rec.data.userid !== 'root@pam', > + getUrl: (rec) => > + `/access/users/${encodeURIComponent(rec.getId())}`, > callback: 'reload', > }, > '-', > diff --git a/www/window/UserEdit.js b/www/window/UserEdit.js > index aaae835f..06ec5377 100644 > --- a/www/window/UserEdit.js > +++ b/www/window/UserEdit.js > @@ -20,7 +20,7 @@ Ext.define('PBS.window.UserEdit', { > var baseurl = '/api2/extjs/access/users'; > > me.isCreate = !userid; > - me.url = userid ? baseurl + '/' + userid : baseurl; > + me.url = userid ? baseurl + '/' + encodeURIComponent(userid) : baseurl; > me.method = userid ? 'PUT' : 'POST'; > me.autoLoad = !!userid; > > -- > 2.20.1