Uploaded image for project: 'Bitbucket Data Center'
  1. Bitbucket Data Center
  2. BSERV-13128

Bitbucket Tooltip, CVE-2021-42574, not working properly in Chrome

    XMLWordPrintable

Details

    Description

      Problem

      The Tooltip created as mitigation for CVE-2021-42574, has some issues using Chrome. There are specific scenarios which the BIDI characters are highlighted but the tooltip is not available.

      Environment

      Bitbucket 7.14.4
      Chrome

      Steps to Reproduce

      1. Upload the attached files to Bitbucket
      2. On Bitbucket UI, go the repository and open the CodeMirror.java
      3. Try to get the tooltip on lines 7 and 17
      4. Go back and open the CodeMirror.txt
      5. Try to get the tooltip on lines 7 and 17

      Expected Results

      The tooltip should work properly for all the five BIDI characters from both files

      Actual Results

      Despite the fact all the five BIDI characters from this sample java file are highlighted, the first one from line 7 and the one from line 17 does not show the tooltip. The same behavior does not happen with the sample text file. Both files have the same contents, the only difference is one has .java extension and the other .txt

      Workaround

      Use a different browser. The use case was tested using Mozilla Firefox and Safari, and for both browsers the outcome was different from Chrome, the tooltip worked as expected there.

      Notes

      Attachments

        1. CodeMirror.java
          1 kB
        2. CodeMirror.txt
          1 kB
        3. image-2022-01-26-15-17-55-922.png
          image-2022-01-26-15-17-55-922.png
          332 kB

        Issue Links

          Activity

            People

              Unassigned Unassigned
              cdf10c660068 Kent Rogers
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: