Query Param Validation Meta-bug

Bug #1457634 reported by Jason Boyer
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Evergreen
Confirmed
Medium
Unassigned

Bug Description

Eg: *
Else, N/A

Related to bug 1457625, we need to work on being less trusting of query params, not just locg. I don't know that there are any security issues as of yet but triggering ISE's just by playing with query params is not good. At least a 500 error implies that we have checked the params and found them lacking, vs. plowing ahead until we hit a wall. (Sane defaulting allows users to be sloppy and still see results, that's another thing to consider.)

Tags: opac search
tags: added: opac search
Changed in evergreen:
status: New → Confirmed
importance: Undecided → Medium
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.