Package: ldap-account-manager
Version: 1.1.1-1
Severity: important

TREE VIEW

In tree view, if I change the description to

123"456'789

I see:

Do you want to make these changes?

Attribute       Old value       New value
description     les             123\"456\'789

which is different, and then when I push commit, the value comes out as:

123\\\"456\\\'789



USERS VIEW

The HTML generated for the form is:

<td>
<input name="description" size="30" maxlength="255" value="123\\\" 456="" 
789="" tabindex="5002" type="text"></td>

Which again is very broken.


(possibly something like this might be a security issue, but I haven't
really considered this in detail yet - presumably the data from LDAP
should be trusted so it should be OK...)

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-xen-686
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to