Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-17932

Pull down menus do not appear in IE6 when the username is longer than 26 characters

      In 3.1-RC2, the "User", "Tools" and "Add" pull-down menus do not appear on hover when using IE6. The "Browse" menu does appear as expected.

      Does not reproduce in RC1, or in IE7/8/FireFox in RC2.

      Edit: This is reproducible when the user's Full Name contains special characters such as [,],<,>

            [CONFSERVER-17932] Pull down menus do not appear in IE6 when the username is longer than 26 characters

            Your fix worked Brian, thanks so much.

            Joseph Kaufman added a comment - Your fix worked Brian, thanks so much.

            A temporary fix has been applied to Confluence 3.1.1, a permanent solution is being tracked at CONF-18199.

            Brian Nguyen (Inactive) added a comment - A temporary fix has been applied to Confluence 3.1.1, a permanent solution is being tracked at CONF-18199 .

            BenA added a comment -

            OK, have determined that this problem happens whenever the name is wider than the dropdown (rendered size, not character count).

            We have a fix that we'll check in to the next release; in the meantime there are two suggested workarounds for anyone who needs an immediate solution:

            1) If possible, upgrade affected users to a newer browser or install an alternative browser in parallel to IE6 (eg. Firefox 3.5). Suitable if software can be upgraded and small number of users are affected.

            2) temporary fix only Add some Custom HTML (admin->Custom HTML->edit->"at the end of the HEAD")

            <!-- START temporary fix for IE6 dropdown problem (CONF-17932). Remove after 3.1.1+ -->
            <!--[if lte IE 6]>
            <script type="text/javascript">
            jQuery(function () {
              jQuery("#header-menu-bar .ajs-menu-item").each(function () {
                  var link = jQuery(this), dropDown = jQuery(".ajs-drop-down", this);
                  if (link.width() > dropDown.width()) {
                      dropDown.width(link.width());
                  }
              });
            });
            </script>
            <style type="text/css">
            * html #header-menu-bar .hidden { width: 12em; }
            </style>
            <![endif]-->
            <!-- END temporary fix for IE6 dropdown problem. --> 
            

            ...this fix must be removed during the next upgrade. It is purely a temporary fix to get people up and running again.

            BenA added a comment - OK, have determined that this problem happens whenever the name is wider than the dropdown (rendered size, not character count). We have a fix that we'll check in to the next release; in the meantime there are two suggested workarounds for anyone who needs an immediate solution: 1) If possible, upgrade affected users to a newer browser or install an alternative browser in parallel to IE6 (eg. Firefox 3.5). Suitable if software can be upgraded and small number of users are affected. 2) temporary fix only Add some Custom HTML (admin->Custom HTML->edit->"at the end of the HEAD") <!-- START temporary fix for IE6 dropdown problem (CONF-17932). Remove after 3.1.1+ --> <!--[ if lte IE 6]> <script type= "text/javascript" > jQuery(function () { jQuery( "#header-menu-bar .ajs-menu-item" ).each(function () { var link = jQuery( this ), dropDown = jQuery( ".ajs-drop-down" , this ); if (link.width() > dropDown.width()) { dropDown.width(link.width()); } }); }); </script> <style type= "text/css" > * html #header-menu-bar .hidden { width: 12em; } </style> <![endif]--> <!-- END temporary fix for IE6 dropdown problem. --> ...this fix must be removed during the next upgrade. It is purely a temporary fix to get people up and running again.

            I've managed to reproduce this on the IE6 VMWare image when the FULLNAME is:

            • <script>alert('test')</script>
            • 123456789012345678901
            • thisisexactlythesameasth

            While the problem doesn't occur when the fullname is:

            • thisisexactlythesameast
            • 12345678901234567890

            It looks like the problem is not with how many characters the fullname has but the size of the rendered text. Users may experience different results depending on font, font size and perhaps even screen resolution.

            Brian Nguyen (Inactive) added a comment - I've managed to reproduce this on the IE6 VMWare image when the FULLNAME is: <script>alert('test')</script> 123456789012345678901 thisisexactlythesameasth While the problem doesn't occur when the fullname is: thisisexactlythesameast 12345678901234567890 It looks like the problem is not with how many characters the fullname has but the size of the rendered text. Users may experience different results depending on font, font size and perhaps even screen resolution.

            We have this problem in Conf 3.1 Build 1722

            Joseph Kaufman added a comment - We have this problem in Conf 3.1 Build 1722

            We've run into this issue as well with names that are longer than 26 chars. Since we get our names from LDAP we cannot control the length and need a quick resolution to this problem. IE6 is our default browser.

            Joseph Kaufman added a comment - We've run into this issue as well with names that are longer than 26 chars. Since we get our names from LDAP we cannot control the length and need a quick resolution to this problem. IE6 is our default browser.

            I think it might be the length of the name, not the special characters. I tested it with a 27 letter name and experienced the bug, and tried a shorter name with [ ] and couldn't.

            Jeremy Largman added a comment - I think it might be the length of the name, not the special characters. I tested it with a 27 letter name and experienced the bug, and tried a shorter name with [ ] and couldn't.

            Good catch Agnes, it does seem to relate to special characters in the name.
            It reproduces on CAC with my name as "Penny Wyatt [Atlassian]". However, if I change it to "Penny Wyatt", it does not reproduce.

            I'm not getting any JavaScript errors in either case.

            Penny Wyatt (On Leave to July 2021) added a comment - Good catch Agnes, it does seem to relate to special characters in the name. It reproduces on CAC with my name as "Penny Wyatt [Atlassian] ". However, if I change it to "Penny Wyatt", it does not reproduce. I'm not getting any JavaScript errors in either case.

            Agnes Ro added a comment -

            Bingo~ I can reproduce it with that XSS in the user's full name:

            <script>alert(document.cookie)</script>
            

            Agnes Ro added a comment - Bingo~ I can reproduce it with that XSS in the user's full name: <script>alert(document.cookie)</script>

            Agnes Ro added a comment -

            Does it have something to do that user and a potential xss name in the user menu? Do you get any javascript errors Penny?

            Agnes Ro added a comment - Does it have something to do that user and a potential xss name in the user menu? Do you get any javascript errors Penny?

              bnguyen Brian Nguyen (Inactive)
              pwyatt Penny Wyatt (On Leave to July 2021)
              Affected customers:
              2 This affects my team
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: