Installation/Getting Started

Expand all | Collapse all

Zenoss 6 bug: characters in event console are displayed as their html entities

Jump to Best Answer
  • 1.  Zenoss 6 bug: characters in event console are displayed as their html entities

    Posted 02-11-2019 06:47 AM
    The characters below are displayed as their html entities representations in Zenoss 6:
    • <   &lt;
    • >   &gt;
    • &   &amp;

    This is a regression from Zenoss 4 as Zenoss 4 did not have this problem.


    Is there anything I'm missing or is this an actual bug?
    Any idea if it will be fixed at some point?

    ------------------------------
    Jad
    ------------------------------


  • 2.  RE: Zenoss 6 bug: characters in event console are displayed as their html entities
    Best Answer

    Posted 02-11-2019 01:10 PM
    It's a bug introduced in version 5.3. You can log it in their Jira bug tracker, if you like.

    ------------------------------
    Jason Olson
    ------------------------------



  • 3.  RE: Zenoss 6 bug: characters in event console are displayed as their html entities

    Posted 05-02-2019 05:31 AM
    Thanks
    Here it is: https://jira.zenoss.com/browse/ZEN-31386

    ------------------------------
    Jad
    ------------------------------



  • 4.  RE: Zenoss 6 bug: characters in event console are displayed as their html entities

    Posted 05-09-2019 07:43 AM
    Not a bug, they changed it to prevent XSS attacks.


    ------------------------------
    jstanley
    ------------------------------



  • 5.  RE: Zenoss 6 bug: characters in event console are displayed as their html entities

    Posted 05-09-2019 08:22 AM
    Edited by Jad Baz 05-09-2019 08:44 AM

    Exactly how is this not a bug? As a user, I couldn't care less about what Zenoss is doing in the background, I care about the user experience and now it is obviously broken. So this is a bug, full stop.
    At any rate, this is not how you fix an input problem.
    Actually, if you just unescape that very text being displayed, you would be done!!! Here you go
    (Of course, the problem is probably much more complicated, but just saying...)



    ------------------------------
    Jad
    ------------------------------



  • 6.  RE: Zenoss 6 bug: characters in event console are displayed as their html entities

    Posted 05-09-2019 06:39 PM
    Yes, it is more complicated.

    As someone who runs the software for various customers, I much rather it be secure than worry about a few special characters showing in the summary.

    ------------------------------
    jstanley
    ------------------------------



  • 7.  RE: Zenoss 6 bug: characters in event console are displayed as their html entities

    Posted 05-10-2019 06:02 AM
    As a software developer, I completely agree with you. Something like this would be at the bottom of my backlog that I might never fix.

    But I must absolutely disagree with you that it is not a bug
    https://en.wikipedia.org/wiki/Software_bug
    software bug is an error, flaw, failure or fault in a computer program or system that causes it to produce an incorrect or unexpected result, or to behave in unintended ways.
    And this falls under "unexpected result" since the user does not expect it!

    So regardless of:
    • The reason it was introduced
    • The urgency/importance of addressing it
    • The amount of effort required to fix it
    • Whether or not it will ever be fixed

    IT IS A BUG!!!



    ------------------------------
    Jad
    ------------------------------