? Pending

User tests: Successful: Unsuccessful:

avatar laoneo
laoneo
4 Apr 2017

Summary of Changes

This pr forces for the list field to use the options rule. This means to it will not be possible to save other values for the list field than what actually is configured in the field by modifying the DOM before the submit button is hit.

Testing Instructions

  • Set up a list field with some options.
  • Edit an article.
  • Try to modify the selected value with the developer tools, or modify the request.

Expected result

It gives out a warning and the field should not be saved.

Actual result

The field saves and in the database is another value saved.

avatar laoneo laoneo - open - 4 Apr 2017
avatar laoneo laoneo - change - 4 Apr 2017
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 4 Apr 2017
Category Administration com_fields Libraries
d68dbe3 4 Apr 2017 avatar laoneo cs
avatar laoneo laoneo - change - 4 Apr 2017
Labels Added: ?
avatar SniperSister
SniperSister - comment - 4 Apr 2017

Tested by the security team and good for merge

/cc @rdeutz

avatar rdeutz rdeutz - change - 4 Apr 2017
Status Pending Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 2017-04-04 14:08:32
Closed_By rdeutz
avatar rdeutz rdeutz - close - 4 Apr 2017
avatar rdeutz rdeutz - merge - 4 Apr 2017

Add a Comment

Login with GitHub to post a comment