Opened 13 years ago

Closed 13 years ago

Last modified 13 years ago

#1087 closed Defect (fixed)

Some BOINC Web Computing Preferences need better sanitization

Reported by: JacobKlein Owned by: davea
Priority: Minor Milestone: Undetermined
Component: Web - Project Version: 6.10.58
Keywords: Web Preferences Sanitization Cc: Jacob_W_Klein@…

Description

Some BOINC Web Computing Preferences need better sanitization

  • "Maximum download rate" should not allow negative numbers
    - "Maximum upload rate" should not allow negative numbers

Change History (3)

comment:1 Changed 13 years ago by davea

Resolution: → fixed
Status: new → closed

(In [23355]) - user web: fix numeric field sanitization in prefs. Fixes #1087.

  • client: if PREFS::max_ncpus_pct is 0, don't set it to 100;

doing so prevents PREFS::max_ncpus from having any effect.

comment:2 Changed 13 years ago by JacobKlein

Quick questions -- How can I test changes to the Web Computing Preferences?  Are the changes immediately available at the BOINC Alpha project's Web Computing Preferences?

comment:3 Changed 13 years ago by JacobKlein

I have verified that the fix works. These 2 web preferences no-longer allow negative numbers, using the "Test" project web preferences. Also, all other web preferences do not allow invalid values.

Note: See TracTickets for help on using tickets.