Joomla! Issue Tracker | Joomla! CMS #35298 - [4] Prohibited input U+00000024

No Code Attached Yet

Closed
7 Mar 2022
Medium
Build: 4.0-dev
# 35298

PhilETaylor
22 Aug 2021

Steps to reproduce the issue

Attempt to create a new contact in Joomla admin when providing the website address as "£$" (not just one or the other, but this exact string)

Expected result

URL Fails validation with normal red banner error message

Actual result

Unhelpful non-user friendly error message.

Punnycode Helper exception thrown is not handled

Additional comments

Note that when using the same £$ in other URL fields in Joomla Admin - such as in the banners component, this error is not shown.

PhilETaylor - open - 22 Aug 2021

joomla-cms-bot - change - 22 Aug 2021

Labels

Added: No Code Attached Yet

joomla-cms-bot - labeled - 22 Aug 2021

dgrammatiko - comment - 22 Aug 2021

Punnycode Helper exception thrown is not handled

Client-side or server-side Punnycode Helper? I mean were the form expected to punycode encode the input's string or this is a php side problem? Or both?

PhilETaylor - comment - 22 Aug 2021

This uncaught error is PHP side. Although to get to PHP side it already passed any (is there any!?) JS validation for urls.

dgrammatiko - comment - 22 Aug 2021

is there any!?) JS validation for urls

There's some unusable validation script but it only uses Punycode for emails:

joomla-cms/build/media_source/system/js/fields/validate.es6.js

Lines 33 to 37 in 173ac7d

    
           this.setHandler('email', (value) => { 
        
             const newValue = punycode.toASCII(value); 
        
             const regex = /^[a-zA-Z0-9.!#$%&’*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*$/; 
        
             return regex.test(newValue); 
        
           });

Also most of the time it doesn't do anything more than informing the user of required inputs without value...

PhilETaylor - comment - 22 Aug 2021

<input type="url" inputmode="url" name="jform[webpage]" class="form-control valid form-control-success" id="jform_webpage" value="" size="30" aria-invalid="false">

Strange that HTML type url allows the entry of and form submission of a value of £$

In this test is doesnt: https://www.w3schools.com/tags/tryit.asp?filename=tryhtml5_input_type_url

PhilETaylor - change - 7 Mar 2022

Status	New	⇒	Closed
Closed_Date	0000-00-00 00:00:00	⇒	2022-03-07 18:36:39
Closed_By		⇒	PhilETaylor

PhilETaylor - close - 7 Mar 2022

ch2856 - comment - 9 May 2022

Why the issue is closed if the issue is still here? can't create new user " Prohibited input U+0000202C"

chmst - comment - 9 May 2022

"Prohibited input" is not a Joomla message, do you have an extension?

brianteeman - comment - 9 May 2022

The issue is closed only because the original submitter closed it.

It is a valid issue and can be replicated as reported.

@chmst the error message is coming directly from the library as shown in the original screenshot

Add a Comment

Older
Newer

Joomla! Issue Tracker - CMS

[#35298] - [4] Prohibited input U+00000024

Steps to reproduce the issue

Expected result

Actual result

Additional comments

Add a Comment

	this.setHandler('email', (value) => {
	const newValue = punycode.toASCII(value);
	const regex = /^[a-zA-Z0-9.!#$%&’+/=?^_`{\|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)$/;
	return regex.test(newValue);
	});