Bug 28468 - Unicode escape and non-whitespace C0 controls characters crash when put in the name of a record
Summary: Unicode escape and non-whitespace C0 controls characters crash when put in th...
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Cataloging (show other bugs)
Version: Main
Hardware: All All
: P5 - low minor (vote)
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-05-27 03:12 UTC by Victor Grousset/tuxayo
Modified: 2021-05-29 15:15 UTC (History)
1 user (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Victor Grousset/tuxayo 2021-05-27 03:12:25 UTC
Test:
Edit a record and put the following as a name:
foobar

If above, there is nothing between foo and bar and there is no crash, copy it from this link:
https://github.com/minimaxir/big-list-of-naughty-strings/blob/master/blns.txt#L718

«Roses are [0;31mred[0m, violets are [0;34mblue. Hope you enjoy terminal hue»

error ↓↓↓↓↓↓↓

Invalid data, cannot decode metadata object (biblio_metadata.id=294, biblionumber=295, format=marcxml, schema=MARC21, decoding_error=':49: parser error : PCDATA invalid Char value 27
    <subfield code="a">foobar</subfield>
                          ^') at /usr/share/perl5/Exception/Class/Base.pm line 88


non-whitespace C0 controls characters:
https://github.com/minimaxir/big-list-of-naughty-strings/blob/master/blns.txt#L116
Comment 1 Katrin Fischer 2021-05-29 15:15:56 UTC
Can confirm.