Bug #22795
Search on text containing 'colon' symbol causes error.
Start date:
06/20/2019
Due date:
% Done:
0%
Estimated time:
Experiment:
NOvA
Description
This has been reported by Alec Habig (nova):
From email:
Just noticed something today, don't know if it's new or not: but when
one searches ECL on a string that contains a colon, for example, pick
your favorite acnet device name like "e:mgsp", one gets an error in the
python making the SQL call.
Did an extra layer of quotes or something get removed somewhere,
exposing sql to unsanitized input?