[Mashup-dev] [jira] Closed: (MASHUP-897) HTML Sanitization error

Yumani Ranaweera (JIRA) jira at wso2.org
Tue Jul 8 22:41:34 PDT 2008


     [ https://wso2.org/jira/browse/MASHUP-897?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Yumani Ranaweera closed MASHUP-897.
-----------------------------------


Verified. Closed.

> HTML Sanitization error
> -----------------------
>
>                 Key: MASHUP-897
>                 URL: https://wso2.org/jira/browse/MASHUP-897
>             Project: WSO2 Mashup Server
>          Issue Type: Bug
>          Components: Core
>    Affects Versions: 1.1
>         Environment: WinXP, JDK1.5
>            Reporter: Yumani Ranaweera
>            Assignee: Keith Godwin Chapman
>             Fix For: 1.1
>
>
> Steps to reproduce:
> -------------------------
> 1. Start the Mashup Server
> 2. Frm the file system, go to admin users folder, and create a new text file, copy a valid service source code there, close the file and rename as 555.js (a name starting with a number)
> ----> the server will give u an error saying the name given for the .js service is invalid
> 3. Next, try to rename the file, (frm the file system) to a valid name.
> Issue:
> ---------
> At the time of the step 3, it reports a 'HTML Sanitization error' in the startup console.
>  INFO [2008-07-07 12:19:59,578]  org.apache.axis2.deployment.DeploymentException:  A ServiceName cannot start with the character 5. The ServiceName 55
> 5 is not valid
> ERROR [2008-07-07 12:21:49,140]  HTML Sanitization error
> org.owasp.validator.html.ScanException: No input (null)
>         at org.owasp.validator.html.scan.AntiSamyDOMScanner.scan(Unknown Source)
>         at org.owasp.validator.html.AntiSamy.scan(Unknown Source)
>         at org.wso2.mashup.utils.MashupUtils.sanitizeHtml(MashupUtils.java:1379)
>         at org.wso2.mashup.deployer.JSDeployer.processService(JSDeployer.java:528)
>         at org.wso2.mashup.deployer.JSDeployer.deploy(JSDeployer.java:194)
>         at org.apache.axis2.deployment.repository.util.DeploymentFileData.deploy(DeploymentFileData.java:136)
>         at org.apache.axis2.deployment.DeploymentEngine.doDeploy(DeploymentEngine.java:597)
>         at org.apache.axis2.deployment.repository.util.WSInfoList.update(WSInfoList.java:144)
>         at org.apache.axis2.deployment.RepositoryListener.update(RepositoryListener.java:330)
>         at org.apache.axis2.deployment.RepositoryListener.checkServices(RepositoryListener.java:227)
>         at org.apache.axis2.deployment.RepositoryListener.startListener(RepositoryListener.java:324)
>         at org.apache.axis2.deployment.scheduler.SchedulerTask.checkRepository(SchedulerTask.java:64)
>         at org.apache.axis2.deployment.scheduler.SchedulerTask.run(SchedulerTask.java:71)
>         at org.apache.axis2.deployment.scheduler.Scheduler$SchedulerTimerTask.run(Scheduler.java:83)
>         at java.util.TimerThread.mainLoop(Timer.java:512)
>         at java.util.TimerThread.run(Timer.java:462)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the Mashup-dev mailing list