Uploaded image for project: 'Reference Application'
  1. Reference Application
  2. RA-562

Find patient page broken by JS injection

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Accepted
    • Priority: TBD
    • Resolution: Fixed
    • Affects Version/s: OpenMRS 2.1
    • Fix Version/s: OpenMRS 2.2
    • Component/s: None
    • Labels:
      None
    • Complexity:
      Undetermined

      Description

      Noticed this because the find patient functionality on the devtest02 server was broken.

      If you create a patient with a name that includes this

      ");

      then the find patient page will fail with an error like

      SyntaxError: missing } after property list http://devtest02.openmrs.org:8080/openmrs/coreapps/findpatient/findPatient.page?app=coreapps.findPatient Line 248
      

      (I am going to fix this specific issue, but not look more broadly into JS injection errors.)

        Attachments

          Activity

            People

            Assignee:
            darius Darius Jazayeri [X] (Inactive)
            Reporter:
            darius Darius Jazayeri [X] (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: