-
Type:
Defect
-
Resolution: Unresolved
-
Priority:
Standard
-
None
-
Affects Version/s: None
-
Component/s: Security
-
None
Problem:
Urls that are entered into the Gateway need to be checked to see if they are url encoded.
This includes both related links and dataset descriptions.
NOTE: The dataset description use case is most likely much more difficult to solve than the related link use case and the description use case might need its own story.
Acceptance Criteria:
Determine if there is concern with entering URLs into Gateway with examples.
Reject URLs in Related Links that are URL encoded.
Provide appropriate validation and validation message in related links form.
Questions: What should we do if we encounter an encoded URL? Reject it? Sanitize it?
Urls that are entered into the Gateway need to be checked to see if they are url encoded.
This includes both related links and dataset descriptions.
NOTE: The dataset description use case is most likely much more difficult to solve than the related link use case and the description use case might need its own story.
Acceptance Criteria:
Determine if there is concern with entering URLs into Gateway with examples.
Reject URLs in Related Links that are URL encoded.
Provide appropriate validation and validation message in related links form.
Questions: What should we do if we encounter an encoded URL? Reject it? Sanitize it?
- is related to
-
GTWY-5405 Sanitize All Input to Gateway
-
- To Do
-