fedora-qa / testdays-web

#53 Embedded URLs appended to legit DNS doesn't get flagged
Opened by sumantrom. Modified

Open
Close Issue

Bugs link at th moment has to
a) 1 each line
b) Gitlab,RHBZ,pagure, gitea... BUT when you embedd a URL it gets accepted which is not good.
It is how people will be able to download anything in the App server and client end just by a click

example is https://www.redhat.com/en/search?search=https://communityblog.fedoraproject.org/feed, you can find it on https://testdays.fedoraproject.org/testday/1

Please use the staging testdays instance for testing, not the production one.

It is how people will be able to download anything in the App server and client end just by a click

I don't understand this. Assuming there is an attacker which received the creator or admin role, and can just adjust testcase hyperlinks, what exactly can they do?

@sumantrom Hi, can you explain this in more detail?

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/quality/testdays-web/issues/53

Please continue any further discussion there.
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.