Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-36281

"Lost page" redirectedFromClassic error when JQL colon or 'was' expression used

    XMLWordPrintable

Details

    Description

      1. Do a JQL search for 
        status was in ("In Progress") on "2013-12-19 9:30"

        or some variant (the results don't matter).

      2. Click to the dashboard
      3. Click 'Issues' -> 'Unsaved Filter'

      The URL becomes .../issues/?redirectedFromClassic= and an error displays:

      The same error occurs on the last step of bulk-editing.

      In atlassian-jira-security.log one finds the log:

      Potential malicious redirect detected: /issues/?jql=status%20was%20in%20(%22In%20Progress%22)%20on%20%222013-12-19%209:30%22

      This is probably the result of the JRA-34751 change.

      Attachments

        Issue Links

          is caused by

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-34751 getRedirect in JiraWebActionSupport redirects to unsafe URLs by default

          • Medium - Medium priority issues
          • Closed
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-37270 after upgrading to JIRA 6.2, dashboard issue link seems to broken

          • Medium - Medium priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-37364 In latest 6.2 clicking a link on dashboard shows error page

          • Low - Low priority issues
          • Closed
          mentioned in

          Page Loading...

          Testing discovered

          JDEV-28018 Loading...

          Activity

            People

              ohernandez@atlassian.com Oswaldo Hernandez (Inactive)
              0b2d47721c0e Red Radish Consulting
              Votes:
              6 Vote for this issue
              Watchers:
              16 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: