Closed Bug 962660 Opened 10 years ago Closed 10 years ago

[IARC] Server error on www.globalratings.com when trying to create an IARC certificate from Marketpace

Categories

(Marketplace Graveyard :: Admin Tools, defect)

Product:
Marketplace Graveyard
Component:
Admin Tools
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 962362

People

(Reporter: mossroy, Unassigned)

Details

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0 (Beta/Release)
Build ID: 20131206152142

Steps to reproduce:

In the administration page of my app, I went to the "content ratings" section, and clicked on "create an IARC certificate"


Actual results:

It opened another tab on https://www.globalratings.com/IARCProdRating/Submission.aspx, with an ASP.NET error :

Server Error in '/IARCPRODRating' Application.
A potentially dangerous Request.Form value was detected from the client (company="Mossroy <mossroy@free.fr>"). 

See http://pastebin.mozilla.org/4074041 for the whole web page content
I guess the error comes from the "<" and ">" characters, considered as an attempt to inject HTML code in their HTML forms...


Expected results:

It should open the form to create an IARC certificate, without any error
Status: UNCONFIRMED → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.