Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-21050

Treemenu broken after EZPESU-2013-011 on IE7-8

    Details

      Description

      After installing EZPESU-2013-011-KERNEL4.7 and clearing the caches, the content structure menu in administration interface disappears.

      1. EZP-21050_ezp47.diff
        0.6 kB
        Joao Inacio
      1. screenshot.jpg
        222 kB

        Issue Links

          Activity

          Joao Inacio (Inactive) created issue -
          Joao Inacio (Inactive) made changes -
          Field Original Value New Value
          Attachment screenshot.jpg [ 15937 ]
          Joao Inacio (Inactive) made changes -
          Link This issue relates to EZP-20202 [ EZP-20202 ]
          Joao Inacio (Inactive) made changes -
          Status Open [ 1 ] Backlog [ 10000 ]
          Joao Inacio (Inactive) made changes -
          Description After installing EZPESU-2013-011-KERNEL4.7 , the administration interface After installing EZPESU-2013-011-KERNEL4.7 and clearing the caches, the content structure menu in administration interface disappears.
          Joao Inacio (Inactive) made changes -
          Link This issue relates to EZP-21049 [ EZP-21049 ]
          Gunnstein Lye made changes -
          Status Backlog [ 10000 ] InputQ [ 10001 ]
          Gunnstein Lye made changes -
          Rank Ranked higher
          Gunnstein Lye made changes -
          Rank Ranked higher
          Gunnstein Lye made changes -
          Rank Ranked higher
          Yannick Roger (Inactive) made changes -
          Status InputQ [ 10001 ] Development [ 3 ]
          Assignee Yannick Roger [ yannick.roger@ez.no ]
          Yannick Roger (Inactive) made changes -
          Link This issue relates to EZP-21038 [ EZP-21038 ]
          Hide
          Joao Inacio (Inactive) added a comment -

          I had some trouble reproducing this again, so additional steps follow:

          1) Apply EZPESU-2013-011-KERNEL4.7 patch
          2) Run ezcache --clear-all
          3) Access the Content Structure menu
          4) Verify that the menu is gone.

          However, if the page is refreshed, the menu seems to reappear again.

          The reverse also happens:
          1) Revert EZPESU-2013-011-KERNEL4.7 patch
          2) Run ezcache --clear-all
          3) Access the Content Structure menu
          4) Verify that the menu is gone.

          Refresh page, menu is back once more.

          Show
          Joao Inacio (Inactive) added a comment - I had some trouble reproducing this again, so additional steps follow: 1) Apply EZPESU-2013-011-KERNEL4.7 patch 2) Run ezcache --clear-all 3) Access the Content Structure menu 4) Verify that the menu is gone. However, if the page is refreshed, the menu seems to reappear again. The reverse also happens: 1) Revert EZPESU-2013-011-KERNEL4.7 patch 2) Run ezcache --clear-all 3) Access the Content Structure menu 4) Verify that the menu is gone. Refresh page, menu is back once more.
          Yannick Roger (Inactive) logged work - 24/Jun/13 2:00 AM
          • Time Spent:
            4 hours
             

            .

          Joao Inacio (Inactive) made changes -
          Attachment EZP-21050_ezp47.diff [ 15959 ]
          Yannick Roger (Inactive) logged work - 25/Jun/13 2:00 AM
          • Time Spent:
            4 hours
             

            .

          Yannick Roger (Inactive) made changes -
          Summary Content structure menu disappears after EZPESU-2013-011 Treemenu broken after EZPESU-2013-011 on IE7-8
          Yannick Roger (Inactive) made changes -
          Status Development [ 3 ] Development review [ 10006 ]
          Yannick Roger (Inactive) made changes -
          Remaining Estimate 0 minutes [ 0 ]
          Time Spent 2 hours [ 7200 ]
          Worklog Id 35725 [ 35725 ]
          Yannick Roger (Inactive) made changes -
          Time Spent 2 hours [ 7200 ] 6 hours [ 21600 ]
          Worklog Id 35726 [ 35726 ]
          Yannick Roger (Inactive) made changes -
          Time Spent 6 hours [ 21600 ] 1 day, 2 hours [ 36000 ]
          Worklog Id 35727 [ 35727 ]
          Yannick Roger (Inactive) logged work - 26/Jun/13 6:29 PM
          • Time Spent:
            2 hours
             

            .

          Joao Pingo (Inactive) logged work - 27/Jun/13 10:18 AM - edited
          • Time Spent:
            2 hours
             

            Tested on 4.7

          Yannick Roger (Inactive) logged work - 27/Jun/13 12:26 PM
          • Time Spent:
            2 hours
             
            <No comment>
          Yannick Roger (Inactive) made changes -
          Time Spent 1 day, 2 hours [ 36000 ] 1 day, 4 hours [ 43200 ]
          Worklog Id 35805 [ 35805 ]
          Yannick Roger (Inactive) made changes -
          Status Development review [ 10006 ] Development Review done [ 10028 ]
          Affects Version/s 5.1 [ 11280 ]
          Affects Version/s 5.0 [ 10300 ]
          Fix Version/s 5.1 [ 11280 ]
          Fix Version/s 5.0 [ 10300 ]
          Fix Version/s 4.7.0 [ 11010 ]
          Yannick Roger (Inactive) made changes -
          Status Development Review done [ 10028 ] Documentation done [ 10011 ]
          Joao Pingo (Inactive) made changes -
          Status Documentation done [ 10011 ] QA [ 10008 ]
          Assignee Yannick Roger [ yannick.roger@ez.no ] Joao Pingo [ joao.pingo@ez.no ]
          Joao Pingo (Inactive) made changes -
          Time Spent 1 day, 4 hours [ 43200 ] 1 day, 6 hours [ 50400 ]
          Worklog Id 35847 [ 35847 ]
          Joao Pingo (Inactive) made changes -
          Worklog Id 35847 [ 35847 ]
          Hide
          Joao Pingo (Inactive) added a comment - - edited

          Tested on 4.5, 4.6, 4.7 with all Service Packs, test passed
          Tested on 5.0 with all Service Packs and the patch from https://jira.ez.no/browse/EZP-20202, test passed
          Tested on 5.1, test passed
          Used tc-1704
          QA Approved

          Show
          Joao Pingo (Inactive) added a comment - - edited Tested on 4.5, 4.6, 4.7 with all Service Packs, test passed Tested on 5.0 with all Service Packs and the patch from https://jira.ez.no/browse/EZP-20202 , test passed Tested on 5.1, test passed Used tc-1704 QA Approved
          Joao Pingo (Inactive) made changes -
          Status QA [ 10008 ] QA done [ 10007 ]
          Joao Pingo (Inactive) made changes -
          Status QA done [ 10007 ] QA [ 10008 ]
          Joao Pingo (Inactive) made changes -
          Status QA [ 10008 ] QA done [ 10007 ]
          Joao Pingo (Inactive) made changes -
          Time Spent 1 day, 6 hours [ 50400 ] 2 days, 3 hours [ 68400 ]
          Worklog Id 35871 [ 35871 ]
          Joao Pingo (Inactive) logged work - 28/Jun/13 4:31 PM
          • Time Spent:
            5 hours
             

            Testing in 4.5, 4.6, 4.7, 5.0 and 5.1

          André Rømcke made changes -
          Status QA done [ 10007 ] Deploy [ 10009 ]
          Assignee Joao Pingo [ joao.pingo@ez.no ] André Rømcke [ andre.romcke@ez.no ]
          Resolution Fixed [ 1 ]
          Show
          André Rømcke added a comment - Mentioned as part of http://share.ez.no/community-project/security-advisories/ezsa-2013-010-xss-attack-possible-in-content-treemenu-object-names-not-sanitized
          André Rømcke made changes -
          Assignee André Rømcke [ andre.romcke@ez.no ]
          Status Deploy [ 10009 ] Closed [ 6 ]
          Hide
          Gunnstein Lye added a comment -

          Reopen to change issue type

          Show
          Gunnstein Lye added a comment - Reopen to change issue type
          Gunnstein Lye made changes -
          Resolution Fixed [ 1 ]
          Status Closed [ 6 ] Reopened [ 4 ]
          Gunnstein Lye made changes -
          Security Security [ 10101 ]
          Gunnstein Lye made changes -
          Status Reopened [ 4 ] Closed [ 6 ]
          Resolution Fixed [ 1 ]
          Joao Pingo (Inactive) made changes -
          Resolution Fixed [ 1 ]
          Status Closed [ 6 ] Reopened [ 4 ]
          Joao Pingo (Inactive) made changes -
          Status Reopened [ 4 ] Closed [ 6 ]
          Resolution Fixed [ 1 ]
          Yannick Roger (Inactive) made changes -
          Resolution Fixed [ 1 ]
          Status Closed [ 6 ] Reopened [ 4 ]
          Assignee Yannick Roger [ yannick.roger@ez.no ]
          Yannick Roger (Inactive) made changes -
          Affects Version/s 5.2 [ 12582 ]
          Affects Version/s 5.3-dev [ 12979 ]
          Yannick Roger (Inactive) made changes -
          Fix Version/s 5.0 [ 10300 ]
          Fix Version/s 4.7.0 [ 11010 ]
          Fix Version/s 5.1 [ 11280 ]
          Yannick Roger (Inactive) made changes -
          Affects Version/s 4.6.0 [ 11005 ]
          Affects Version/s 4.5.0 [ 11000 ]
          Yannick Roger (Inactive) made changes -
          Fix Version/s 4.5 Maintenance [ 12585 ]
          Fix Version/s 4.6 Maintenance [ 12584 ]
          Fix Version/s 4.7 Maintenance [ 12583 ]
          Fix Version/s 5.0 Maintenance [ 11287 ]
          Fix Version/s 5.1 Maintenance [ 12301 ]
          Hide
          Yannick Roger (Inactive) added a comment - - edited
          Show
          Yannick Roger (Inactive) added a comment - - edited Fixed in master (before 5.2 came out): https://github.com/ezsystems/ezpublish-legacy/commit/1010cafa1a938472bf4f58c9cb2208aac1a9c828
          Yannick Roger (Inactive) made changes -
          Status Reopened [ 4 ] Confirmed [ 10037 ]
          Bertrand Dunogier made changes -
          Status Confirmed [ 10037 ] InputQ [ 10001 ]
          Yannick Roger (Inactive) made changes -
          Status InputQ [ 10001 ] Development [ 3 ]
          Yannick Roger (Inactive) made changes -
          Affects Version/s 5.2 [ 12582 ]
          Affects Version/s 5.3-dev [ 12979 ]
          Yannick Roger (Inactive) made changes -
          Fix Version/s 5.2 [ 12582 ]
          Yannick Roger (Inactive) made changes -
          Assignee Yannick Roger [ yannick.roger@ez.no ]
          Status Development [ 3 ] Closed [ 6 ]
          Resolution Fixed [ 1 ]
          André Rømcke made changes -
          Workflow eZ Engineering Scrumban Workflow [ 56100 ] EZ* Development Workflow [ 83931 ]
          Alex Schuster made changes -
          Workflow EZ* Development Workflow [ 83931 ] EZEE Development Workflow [ 122554 ]
          Transition Time In Source Status Execution Times Last Executer Last Execution Date
          Open Open Backlog Backlog
          2m 36s 1 joao.inacio@ez.no 12/Jun/13 8:28 PM
          Backlog Backlog InputQ InputQ
          4d 13h 36m 1 Gunnstein Lye 17/Jun/13 10:04 AM
          Development Development Development Review Development Review
          8d 1h 30m 1 yannick.roger@ez.no 26/Jun/13 12:01 PM
          Development Review Development Review Development Review done Development Review done
          1d 25m 1 yannick.roger@ez.no 27/Jun/13 12:27 PM
          Development Review done Development Review done Documentation Review done Documentation Review done
          9s 1 yannick.roger@ez.no 27/Jun/13 12:27 PM
          Documentation Review done Documentation Review done QA QA
          3h 35m 1 Joao Pingo (Inactive) 27/Jun/13 4:03 PM
          QA Done QA Done QA QA
          1m 46s 1 Joao Pingo (Inactive) 28/Jun/13 12:52 PM
          QA QA QA Done QA Done
          23h 25m 2 Joao Pingo (Inactive) 28/Jun/13 3:30 PM
          QA Done QA Done Deploy Deploy
          6d 18h 4m 1 André Rømcke 05/Jul/13 9:35 AM
          Deploy Deploy Closed Closed
          34d 6h 15m 1 André Rømcke 08/Aug/13 3:51 PM
          Reopened Reopened Closed Closed
          1m 16s 2 Joao Pingo (Inactive) 17/Oct/13 4:11 PM
          Closed Closed Reopened Reopened
          159d 20h 30m 3 yannick.roger@ez.no 15/Jan/14 11:22 AM
          Reopened Reopened Confirmed Confirmed
          3m 43s 1 yannick.roger@ez.no 15/Jan/14 11:26 AM
          Confirmed Confirmed InputQ InputQ
          2m 43s 1 Bertrand Dunogier 15/Jan/14 11:29 AM
          InputQ InputQ Development Development
          1d 37m 2 yannick.roger@ez.no 15/Jan/14 11:40 AM
          Development Development Closed Closed
          1h 57m 1 yannick.roger@ez.no 15/Jan/14 1:37 PM

            People

            • Assignee:
              Unassigned
              Reporter:
              Joao Inacio (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 2 days, 3 hours
                2d 3h