Crashes out when requesting the file. Can not change or delete the \ in the input screen

[Mark de Bont]

Query string: buildKey=IPIPE-VBMST1259-SIM&buildNumber=1&path=\/Build

    Stack Trace:

java.lang.IllegalArgumentException: Dangerous string detected: //build/generateAgentBrowser.action?buildKey=IPIPE-VBMST1259-SIM&buildNumber=1&path=\/Build

[Hutuleac Iulius]

Hi Mark,

I will have a look on it. I remember I have some logic there in order to prevent user from going out of the build folder and looking randomly on the agent harddrive.

Julius

[Hutuleac Iulius]

Fixed path checking mechanism on windows agents

[Mark de Bont]

Installed the latest 2.8.8 build but still similar problems

 Version: 5.12.1
Build: 51211
Build Date: 25 May 2016
Request information:

    Request URL: http://einzXXXX:8085/500.action
    Scheme: http
    Server: einzXXXX
    Port: 8085
    URI: /500.action
    Context path:
    Servlet path: /500.action
    Path info:
    Query string: buildKey=IPIPE-VBMST1249-SIM&buildNumber=10&path=\/Baseline.txt

Stack Trace:

java.lang.IllegalArgumentException: Dangerous string detected: //build/generateAgentBrowser.action?buildKey=IPIPE-VBMST1249-SIM&buildNumber=10&path=\/Baseline.txt

[Mark de Bont]

No improvement after update to 2.8.8

[Hutuleac Iulius]

Hi Mark,

is your server on windows or only the agent ?

Julius

[Mark de Bont]

Bamboo Windows server with Windows Agents. Although we have one Linux Agent (I didn't test that one)

[Hutuleac Iulius]

Julius

I think I know what is the issue, unsafe URLs are being caused by special characters like "\".

I will try to use "/" also on windows to avoid this issue.

Julius

[Hutuleac Iulius]

Swapped all system dependent file path separators to /