Uploaded image for project: 'RH-SSO'
  1. RH-SSO
  2. RHSSO-2204

[RH-SSO 7.6.X container images] Escape all XML special characters (AKA incomplete fix for CLOUD-3198)

    XMLWordPrintable

Details

    • False
    • None
    • False
    • Compatibility/Configuration, User Experience
    • Workaround Exists
    • Hide

      Till the updated RH-SSO container image, containing the correction is available:

      • Either don't use any XML special characters in environment variables passed to the image,
      • Or escape that special XML character in the environment variable value (if correlated circumstances specific to this env var allow it to be escaped).
      Show
      Till the updated RH-SSO container image, containing the correction is available: Either don't use any XML special characters in environment variables passed to the image, Or escape that special XML character in the environment variable value (if correlated circumstances specific to this env var allow it to be escaped).
    • Hide

      See the accompanied SSOSUP-207 ticket.

      Show
      See the accompanied SSOSUP-207 ticket.
    • CIAM Sprint 23

    Description

      Using some of XML special characters in the value of some environment variable, passed to the RH-SSO container image (mainly env vars holding passwords or dynamically generated values) leads to malformed XML configuration file, subsequently followed by a RH-SSO pod startup failure.

      This issue is related to previous CLOUD-3198, but additional (on top of CLOUD-3198 fix) is necessary, because the original fix escaped just the ampersand (&) and semicolon (;) characters, and only, when specified as part of the JDBC URL string.

      We need to extend the original fix to escape all five of the XML special characters

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. RHSSO-2017 [RH-SSO 7.5.X container images] Escape all XML special characters (AKA incomplete fix for CLOUD-3198)

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          is related to

          Bug - A problem that impairs or prevents the functions of the product. CLOUD-3198 [EAP7] When user supplies a JDBC connection URL, parts of the URL will be ignored

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • New
          relates to

          Bug - A problem that impairs or prevents the functions of the product. RHSSO-2018 [RH-SSO 7.5.2+ container images] Add a pre-launch check to throw an error message when generated standalone-openshift.xml XML configuration file is invalid / malformed

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Closed
          mentioned on

          GitLab Issue - Implement XMLEscapeCharactersTest

          Activity

            People

              rhn-jlieskov Ján Lieskovský
              rhn-jlieskov Ján Lieskovský
              Ivan Khomyn
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: