238655 - (遠藤) Do not allow & in bug aliases

Status: RESOLVED WONTFIX

(Bugzilla :: Creating/Changing Bugs, defect)

Description

[timeless]

http://bugzilla.mozilla.org/show_bug.cgi?id=a&b
Invalid Bug ID
	  	
The 'bug number' is invalid. It is neither a bug number nor an alias to a bug
number. If you are trying to use QuickSearch, you need to enable JavaScript in
your browser. To help us fix this limitation, add your comments to bug 70907.

That's a lie. I created what seemed to be a perfectly good bug alias, see here:
      <td align="right">
        <b>Bug#:</b>

      </td>
      <td>
        <a href="http://bugzilla.mozilla.org/show_bug.cgi?id=238651">238651</a>
            <label title="a name for the bug that can be used in place of its ID
number, f.e. when adding it to a list of dependencies">
              <b>alias:</b>
              <input name="alias" value="a&amp;b" size="20" maxlength="20">
            </label>
      </td>

Comment 1

[Dave Miller [:justdave]]

If I enter "a&b" in the Find Bug # box in the footer, it works fine.  I wind up
with this in the url bar after getting there:

http://bugzilla.mozilla.org/show_bug.cgi?id=a%26b

notice the & got encoded ;)

Given the way we expect people to use them, I suppose it makes sense to limit
them to characters that won't need to be encoded in URLs....  then again, if we
did that, it would also prevent people from using non-ascii unicode characters
in the aliases, too, which might not be a good thing.

I don't think this is anywhere near clear-cut enough to hold 2.18 for it.

Comment 2

[timeless]

problem is, i use bookmark keywords. they're not smart enough to html encode
things....

Comment 3

[Dave Miller [:justdave]]

That sounds like a bug in the browser.

Comment 4

[timeless]

justdave: i'd like to get this bug fixed before 3.0, see bug 355995 for examples of things where the intl definitely doesn't work. &'s are a mess and we shouldn't support them

Comment 5

[Frédéric Buclin]

wontfix for the same reason as in bug 355995. There is no valid reason to forbird & in the alias name besides you (incorrectly) hacking the URL. About comment 2, that's an issue with your browser, not Bugzilla.