ags710

ags710 Wrote: Hi, We are using jasperserver-ce-3.7.0 on windows xp with tomcat6 and oracle-10g for reporting,as per reports everything is working fine. But the problem is the jasperserver which we are using has to undergo some security tests where its failed...details are below: 1) In manage screen user module while editing the user when test-team insert some scripts in place of user-name(like <script>'alert('1')' etc) the screen gets struck and users list which which is displayed get disappear and we cannot do any operation on it as cursor is always busy there. this get's resolved as soon as we refresh the jasper-database but again we come through same problem when tests on jasperserver are repeated. 2) The same is the problem with the roles module. Can any one please help me how to get rid of this problem asap as security tests are must for this. Thanks in advance. Please revert back if any idea. Post Edited by ags710 at 08/09/2010 05:34

Hi, We are using jasperserver-ce-3.7.0 on windows xp with tomcat6 and oracle-10g for reporting,as per reports everything is working fine. But the problem is the jasperserver which we are using has to undergo some security tests where its failed...details are below: 1) In manage screen user module while editing the user when test-team insert some scripts in place of user-name(like <script>'alert('1')' etc) the screen gets struck and users list which which is displayed get disappear and we cannot do any operation on it as cursor is always busy there. this get's resolved as soon as we refresh the jasper-database but again we come through same problem when tests on jasperserver are repeated. 2) The same is the problem with the roles module. Can any one please help me how to get rid of this problem asap as security tests are must for this. Thanks in advance. Please revert back if any idea. Post Edited by ags710 at 08/09/2010 05:34

Can any one tell when this (/js-for-pro-3.7.x at revision 17560) will be available in community edition and if there is any way now to take this revision to jasperserver3.7.0-ce. Thanks

Hi all, We are using jasperserver-ce-3.7.0 for reporting under tomcat6 and oracle10g. When url is sent for security tests suddenly it got stuck and after that in manage-users screen users are not visible. Perhaps when we search for users in search option users are displayed. in security tests they ran some cross-site-scripts and when they enter any script in login screen the url don't work and this problem arised. can any one tell wat to do and what not to do with jasperserver while security tests. Can any one pls help on this as this is urgent. Thanks in advance, ags710