Feeling Lucky
J4 Issue
?
[#20370] - [4.0] Media Manager, Attempt to rename file to crazy filename generates internal server error
- Closed
- 10 Feb 2019
- Medium
- Build: staging
- # 20370
Steps to reproduce the issue
in media manager try to rename a file to
`"'><img src=xxx:x \x00onerror=javascript:alert(1)> </style  ><script   :-(>/**/alert(document.location)/**/</script   :-(
Expected result
Error message from the ajax is captured and displayed
Actual result
Just "Internal Server Error" is displayed in the error message when there is a more descriptive message in the JSON response
System information (as much as possible)
Joomla! 4.0.0-alpha3 Alpha [ Amani ] 12-May-2018 15:23 GMT
Additional comments
joomla-cms-bot
- | Labels |
Added:
?
|
||
franz-wohlkoenig
- | Category | ⇒ | com_media UI/UX |
| Status | New | ⇒ | Discussion |
brianteeman
- | Labels |
Added:
?
|
||
| Labels |
Removed:
?
|
||
| Labels |
Added:
J4 Issue
|
||
laoneo
- comment
- 25 May 2018
Would end up then like
with the code https://github.com/joomla-projects/media-manager-improvement/compare/rename?expand=1. But honestly I'm not really happy with it at all as we can't detect if there is a server error or a permission exception when a file can't be moved.
| Status | Discussion | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2019-02-10 21:34:03 |
| Closed_By | ⇒ | PhilETaylor |
wilsonge
- | Labels |
Added:
?
|
||
| Labels |
Removed:
?
|
||
@joomla/security Might need a review of this....