Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

KB attachment path manipulation

Description

1) Add a KB Display portlet
2) Click Add Article button
3) Click Add Attachment
4) Using Firebug, edit the JavaScript section block that starts with

5) Look for the addAttachment URL and modify the the "dirName" parameter from:

to something different like:

You should end up with something like

6) Select a file to upload

The file will be uploaded to the custom path. This should not be allowed.

Activity

Show:

Lawrence Lee July 26, 2012 at 9:28 AM

PASSED Manual Testing following the steps in the description.

Reproduced on:
Tomcat 7.0 + MySQL 5. Portal 6.1 EE GA1

I was able to upload the document to my custom path.

Fixed on:
Tomcat 6.0 + MySQL 5. Portal 6.0.x EE GIT ID: ab55af7f66a8754bf3d8315be9a1c79561214ee1.
Plugins 6.0.x EE GIT ID: 3e94469d9a2fb02b59f8c61b8122a329fbba6947.

Tomcat 7.0 + MySQL 5. Portal 6.1.x EE GIT ID: df7ec3c88660e2687a295450d0f596c3e70687fa.
Plugins 6.1.x EE GIT ID: e5ef52146017aa3f1b8e095322cf1a444ffe7fa7.

Tomcat 7.0 + MySQL 5. Portal 6.2.x GIT ID: 9e24701115367fb6fdd7c1b7409e8d213afd732e.
Plugins 6.2.x GIT ID: 51ca19768429b9d0404d4e64564f8dd92b9c067d.

After uploading, user will see "Please enter a file with a valid file name. "

Michael Saechang July 11, 2012 at 3:43 PM

Committed on:
Plugins 6.1.x CE GIT ID: 68c7ea3ad38d05e95dc8767287484e07d4f1aa73.
Plugins 6.2.x GIT ID: cb1701453a399af8e0cf79d8b77fdff0672449c9.

Samuel Kong June 24, 2012 at 9:18 PM

Turning issue #2 and #3 into their own issues. (, )

Fixed

Details

Assignee

Reporter

Labels

Branch Version/s

6.1.x
6.0.x

Backported to Branch

Committed

Fix Priority

4

Git Pull Request

Components

Fix versions

Affects versions

Priority

Zendesk Support

Created June 15, 2012 at 2:58 AM
Updated June 24, 2023 at 3:51 PM
Resolved August 6, 2012 at 11:39 PM
Loading...