[
https://issues.apache.org/jira/browse/CLOUDSTACK-10153?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16275415#comment-16275415
]
ASF GitHub Bot commented on CLOUDSTACK-10153:
---------------------------------------------
blueorangutan commented on issue #2336: CLOUDSTACK-10153: Introduce string API
arg trust validation
URL: https://github.com/apache/cloudstack/pull/2336#issuecomment-348669014
<b>Trillian test result (tid-1723)</b>
Environment: kvm-centos7 (x2), Advanced Networking with Mgmt server 7
Total time taken: 55824 seconds
Marvin logs:
https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr2336-t1723-kvm-centos7.zip
Intermitten failure detected: /marvin/tests/smoke/test_host_annotations.py
Intermitten failure detected: /marvin/tests/smoke/test_internal_lb.py
Intermitten failure detected: /marvin/tests/smoke/test_iso.py
Intermitten failure detected: /marvin/tests/smoke/test_network.py
Intermitten failure detected: /marvin/tests/smoke/test_privategw_acl.py
Intermitten failure detected: /marvin/tests/smoke/test_routers_network_ops.py
Intermitten failure detected: /marvin/tests/smoke/test_templates.py
Intermitten failure detected: /marvin/tests/smoke/test_usage.py
Intermitten failure detected: /marvin/tests/smoke/test_volumes.py
Intermitten failure detected: /marvin/tests/smoke/test_vpc_vpn.py
Test completed. 59 look OK, 8 have error(s)
Test | Result | Time (s) | Test File
--- | --- | --- | ---
test_01_vpc_site2site_vpn | `Failure` | 176.97 | test_vpc_vpn.py
test_01_vpc_remote_access_vpn | `Failure` | 86.35 | test_vpc_vpn.py
test_07_resize_fail | `Failure` | 15.51 | test_volumes.py
test_04_extract_template | `Failure` | 5.14 | test_templates.py
test_04_rvpc_privategw_static_routes | `Failure` | 289.12 |
test_privategw_acl.py
test_03_vpc_privategw_restart_vpc_cleanup | `Failure` | 168.32 |
test_privategw_acl.py
test_02_vpc_privategw_static_routes | `Failure` | 279.16 |
test_privategw_acl.py
test_01_vpc_privategw_acl | `Failure` | 56.90 | test_privategw_acl.py
ContextSuite context=TestRVPCSite2SiteVpn>:setup | `Error` | 0.00 |
test_vpc_vpn.py
test_01_volume_usage | `Error` | 196.53 | test_usage.py
test_05_create_template_with_no_checksum | `Error` | 65.74 |
test_templates.py
test_04_create_template_with_checksum_md5 | `Error` | 65.67 |
test_templates.py
test_03_create_template_with_checksum_sha256 | `Error` | 65.91 |
test_templates.py
test_02_create_template_with_checksum_sha1 | `Error` | 65.77 |
test_templates.py
ContextSuite context=TestRedundantIsolateNetworks>:teardown | `Error` |
196.93 | test_routers_network_ops.py
test_02_create_iso_with_checksum_sha256 | `Error` | 65.77 | test_iso.py
test_05_add_annotation_for_invalid_entityType | `Error` | 0.08 |
test_host_annotations.py
test_change_service_offering_for_vm_with_snapshots | Skipped | 0.00 |
test_vm_snapshots.py
test_09_copy_delete_template | Skipped | 0.02 | test_templates.py
test_06_copy_template | Skipped | 0.00 | test_templates.py
test_static_role_account_acls | Skipped | 0.03 | test_staticroles.py
test_11_ss_nfs_version_on_ssvm | Skipped | 0.02 | test_ssvm.py
test_01_scale_vm | Skipped | 0.00 | test_scale_vm.py
test_01_primary_storage_iscsi | Skipped | 0.14 | test_primary_storage.py
test_vm_nic_adapter_vmxnet3 | Skipped | 0.00 | test_nic_adapter_type.py
test_03_nic_multiple_vmware | Skipped | 1.25 | test_nic.py
test_nested_virtualization_vmware | Skipped | 0.00 |
test_nested_virtualization.py
test_06_copy_iso | Skipped | 0.00 | test_iso.py
test_list_ha_for_host_valid | Skipped | 0.07 | test_hostha_simulator.py
test_list_ha_for_host_invalid | Skipped | 0.06 | test_hostha_simulator.py
test_list_ha_for_host | Skipped | 0.04 | test_hostha_simulator.py
test_hostha_enable_feature_without_setting_provider | Skipped | 0.06 |
test_hostha_simulator.py
test_hostha_enable_feature_valid | Skipped | 0.08 | test_hostha_simulator.py
test_hostha_disable_feature_valid | Skipped | 0.06 | test_hostha_simulator.py
test_hostha_configure_invalid_provider | Skipped | 0.06 |
test_hostha_simulator.py
test_hostha_configure_default_driver | Skipped | 0.06 |
test_hostha_simulator.py
test_ha_verify_fsm_recovering | Skipped | 0.06 | test_hostha_simulator.py
test_ha_verify_fsm_fenced | Skipped | 0.07 | test_hostha_simulator.py
test_ha_verify_fsm_degraded | Skipped | 0.06 | test_hostha_simulator.py
test_ha_verify_fsm_available | Skipped | 0.06 | test_hostha_simulator.py
test_ha_multiple_mgmt_server_ownership | Skipped | 0.04 |
test_hostha_simulator.py
test_ha_list_providers | Skipped | 0.04 | test_hostha_simulator.py
test_ha_enable_feature_invalid | Skipped | 0.05 | test_hostha_simulator.py
test_ha_disable_feature_invalid | Skipped | 0.05 | test_hostha_simulator.py
test_ha_configure_enabledisable_across_clusterzones | Skipped | 0.06 |
test_hostha_simulator.py
test_configure_ha_provider_valid | Skipped | 0.06 | test_hostha_simulator.py
test_configure_ha_provider_invalid | Skipped | 0.06 |
test_hostha_simulator.py
test_deploy_vgpu_enabled_vm | Skipped | 0.04 | test_deploy_vgpu_enabled_vm.py
test_3d_gpu_support | Skipped | 0.06 | test_deploy_vgpu_enabled_vm.py
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
> Sanitize string arguments in API requests for XSS scripts
> ---------------------------------------------------------
>
> Key: CLOUDSTACK-10153
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10153
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Reporter: Rohit Yadav
> Assignee: Rohit Yadav
> Fix For: Future
>
>
> API requests made using the CloudStack UI does not allow use of special
> characters "<" and ">", however direct API requests made using clis such as
> cloudmonkey may pass unsanitized string API arguments to backend. A backend
> sanitizer can be put in to filter string API argument and remove possible XSS
> scripts using libraries such as https://github.com/OWASP/java-html-sanitizer
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
