[#3295] - Security Failure when removing loggers from the GlobalPropertiesList

Category:
Bug report
Priority:
Normal
Status:
New
Project: Severity:
Minor
Resolution:
Open
Component: Reproducibility:
Always
Assigned to:
0

Hello Support Team,

I added some loggers to the log settings page, unfortunatelly with the preceding log4j.logger, which should not be added on the web interface.
After that I removed them from the GlobalPropertiesList, but I can not remove 2 of them:
com.jaspersoft.jasperserver.api.logging.diagnostic.service.impl.DiagnosticDataProvider
com.jaspersoft.jasperserver.api.logging.diagnostic.helper.DiagnosticAttributeBuilder

This is the jasperserver.log:

2013-11-25 18:35:07,590 ERROR Validator,http-bio-8080-exec-7:408 - [SECURITY FAILURE context=itemToDelete-Create_AdHoc_InputControl_context, key=itemToDelete, type(AlphaNumPunctuation)=^[\u0080\u0099\u2019\p{L}\p{M}\p{N}\p{Pd}\p{Pi}\p{Pf}\p{Pc}\p{Po}\p{Sc}\p{So}\p{Sm}\p{Cf}\p{Z}\s\=\(\)\[\]\~\|\{\}\`\^\+&&[^<>]]*$, input=log4j.log4j.logger.com.jaspersoft.jasperserver.api.logging.diagnostic.service.impl.DiagnosticDataProviderr, maxLength=100, isBlacklist=false]
2013-11-25 18:36:38,339 ERROR Validator,http-bio-8080-exec-6:408 - [SECURITY FAILURE context=itemToDelete-Create_AdHoc_InputControl_context, key=itemToDelete, type(AlphaNumPunctuation)=^[\u0080\u0099\u2019\p{L}\p{M}\p{N}\p{Pd}\p{Pi}\p{Pf}\p{Pc}\p{Po}\p{Sc}\p{So}\p{Sm}\p{Cf}\p{Z}\s\=\(\)\[\]\~\|\{\}\`\^\+&&[^<>]]*$, input=log4j.log4j.logger.com.jaspersoft.jasperserver.api.logging.diagnostic.helper.DiagnosticAttributeBuilderde, maxLength=100, isBlacklist=false]

v5.2.0
mariuss's picture
94
Joined: Aug 11 2013 - 2:33pm
Last seen: 7 years 5 months ago
Feedback
randomness