Return-Path: Delivered-To: apmail-geronimo-dev-archive@www.apache.org Received: (qmail 70522 invoked from network); 9 Sep 2006 03:36:00 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 9 Sep 2006 03:36:00 -0000 Received: (qmail 85781 invoked by uid 500); 9 Sep 2006 03:35:59 -0000 Delivered-To: apmail-geronimo-dev-archive@geronimo.apache.org Received: (qmail 85150 invoked by uid 500); 9 Sep 2006 03:35:58 -0000 Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: Reply-To: dev@geronimo.apache.org List-Id: Delivered-To: mailing list dev@geronimo.apache.org Received: (qmail 85139 invoked by uid 99); 9 Sep 2006 03:35:58 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 08 Sep 2006 20:35:58 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received: from [209.237.227.198] (HELO brutus.apache.org) (209.237.227.198) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 08 Sep 2006 20:35:58 -0700 Received: from brutus (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id C00347142F4 for ; Sat, 9 Sep 2006 03:32:22 +0000 (GMT) Message-ID: <23131505.1157772742769.JavaMail.jira@brutus> Date: Fri, 8 Sep 2006 20:32:22 -0700 (PDT) From: "Vamsavardhana Reddy (JIRA)" To: dev@geronimo.apache.org Subject: [jira] Updated: (GERONIMO-2379) Security Realms portlet - form field validation using javascript In-Reply-To: <11887179.1157441842318.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N [ http://issues.apache.org/jira/browse/GERONIMO-2379?page=all ] Vamsavardhana Reddy updated GERONIMO-2379: ------------------------------------------ Attachment: GERONIMO-2379-revised.patch GERONIMO-2379-revised.patch: Revised to account for 1. In MasterLoginModuleInfo.java the "xxx.blankAllowed" property should be trimmed before comparison. 2. if the "Enable Auditing" checkbox is not clicked then validateForm() will always return false. Please use GERONIMO-2379-revised.patch alone. Note the dependency on GERONIMO-2378. > Security Realms portlet - form field validation using javascript > ---------------------------------------------------------------- > > Key: GERONIMO-2379 > URL: http://issues.apache.org/jira/browse/GERONIMO-2379 > Project: Geronimo > Issue Type: Improvement > Security Level: public(Regular issues) > Components: console > Affects Versions: 1.1.1 > Environment: WinXP, Sun JDK 1.4.2_08, G-1.1.1-rc1 > Reporter: Vamsavardhana Reddy > Fix For: 1.1.2, 1.1.x, 1.2 > > Attachments: GERONIMO-2379-removedtabs.patch, GERONIMO-2379-revised.patch, GERONIMO-2379.patch > > > Security Realm portlet pages do not perform any field validations before submitting the form. Some of the fields can be validated using javascript. Even though it is not complete validation of every field, checks can be put in place for non empty strings, non numerical values etc. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira