[jira] [Commented] (OFBIZ-9593) Input validation failure

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-9593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16134068#comment-16134068 ]

Daniel Coric commented on OFBIZ-9593:
-------------------------------------

Hi Jacques,

I'm really sorry for that missing part in my report - I could bet I had it in my text editor. ;)
It's simply a (nasty) "welcome" error.log after svn checkout.
The first error.log (from the bug report) is generated after I used "https://localhost:8443/webtools/control/main" to login - the second one using "https://localhost:8443/accounting/control/main" (after we've done with 'Steps to reproduce errors') follows.

Steps to reproduce errors:
svn checkout ofbiz-framework/trunk -> ./gradlew cleanAll loadAll -> ./gradlew ofbiz -> login* -> check error.log

*if (https://localhost:8443/webtools/control/main) then (OFBIZ-9379 + same errors in error.log); if (https://localhost:8443/[accounting|content]/control/main) then (same errors in error.log).

error.log:
2017-08-19 11:57:37,088 |Test worker |UtilCodec |E| Canonicalization (format consistency, character escaping that is mixed or double, etc) error for attribute named [double-encoding], String [%2%353Cscript]: org.apache.ofbiz.base.util.UtilCodec$IntrusionException: Input validation failure
2017-08-19 11:58:39,416 |kJoinPool-1-worker-3 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 162. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{exclude}' is expected.
2017-08-19 11:58:39,422 |kJoinPool-1-worker-3 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 574. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{auto-attributes, attribute, override}' is expected.
2017-08-19 11:58:39,423 |kJoinPool-1-worker-3 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 681. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{exclude}' is expected.
2017-08-19 11:58:39,425 |kJoinPool-1-worker-3 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 786. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{auto-attributes, attribute, override}' is expected.
2017-08-19 12:02:13,487 |kJoinPool-1-worker-0 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 162. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{exclude}' is expected.
2017-08-19 12:02:13,495 |kJoinPool-1-worker-0 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 574. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{auto-attributes, attribute, override}' is expected.
2017-08-19 12:02:13,496 |kJoinPool-1-worker-0 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 681. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{exclude}' is expected.
2017-08-19 12:02:13,513 |kJoinPool-1-worker-0 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 786. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{auto-attributes, attribute, override}' is expected.
2017-08-19 12:04:10,602 |jsse-nio-8443-exec-6 |RequestHandler |E| Request setLocaleFromBrowser caused an error with the following message: User authorization is required for this service: setLocaleFromBrowser

> Input validation failure
> ------------------------
>
>                 Key: OFBIZ-9593
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-9593
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework, product
>    Affects Versions: Trunk
>         Environment: Linux 4.9.0-3-amd64 #1 SMP Debian 4.9.30-2+deb9u3 (2017-08-06) x86_64 GNU/Linux
>            Reporter: Daniel Coric
>
> {code}
> 2017-08-18 13:43:48,995 |Test worker |UtilCodec |E| Canonicalization (format consistency, character escaping that is mixed or double, etc) error for attribute named [double-encoding], String [%2%353Cscript]: org.apache.ofbiz.base.util.UtilCodec$IntrusionException: Input validation failure
> 2017-08-18 13:44:55,023 |kJoinPool-1-worker-1 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 162. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{exclude}' is expected.
> 2017-08-18 13:44:55,029 |kJoinPool-1-worker-1 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 574. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{auto-attributes, attribute, override}' is expected.
> 2017-08-18 13:44:55,032 |kJoinPool-1-worker-1 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 681. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{exclude}' is expected.
> 2017-08-18 13:44:55,036 |kJoinPool-1-worker-1 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 786. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{auto-attributes, attribute, override}' is expected.
> 2017-08-18 13:46:54,821 |kJoinPool-1-worker-1 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 162. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{exclude}' is expected.
> 2017-08-18 13:46:54,832 |kJoinPool-1-worker-1 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 574. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{auto-attributes, attribute, override}' is expected.
> 2017-08-18 13:46:54,834 |kJoinPool-1-worker-1 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 681. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{exclude}' is expected.
> 2017-08-18 13:46:54,836 |kJoinPool-1-worker-1 |UtilXml |E| XmlFileLoader: File /home/daniel/Development/Repositories/subversion/ofbiz-framework/applications/product/servicedef/services_facility.xml process error. Line: 786. Error message: cvc-complex-type.2.4.a: Invalid content was found starting with element 'type-validate'. One of '{auto-attributes, attribute, override}' is expected.
> 2017-08-18 13:47:35,845 |jsse-nio-8443-exec-7 |RequestHandler |E| Request setLocaleFromBrowser caused an error with the following message: User authorization is required for this service: setLocaleFromBrowser
> 2017-08-18 13:47:54,176 |jsse-nio-8443-exec-4 |ControlServlet |E| Error in request handler:
> org.apache.ofbiz.webapp.control.RequestHandlerException: No definition found for view with name [setLocaleFromBrowser]
> at org.apache.ofbiz.webapp.control.RequestHandler.renderView(RequestHandler.java:902) ~[ofbiz.jar:?]
> at org.apache.ofbiz.webapp.control.RequestHandler.doRequest(RequestHandler.java:648) ~[ofbiz.jar:?]
> at org.apache.ofbiz.webapp.control.ControlServlet.doGet(ControlServlet.java:207) [ofbiz.jar:?]
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:687) [javax.servlet-api-3.1.0.jar:3.1.0]
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [javax.servlet-api-3.1.0.jar:3.1.0]
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.ofbiz.webapp.control.ContextFilter.doFilter(ContextFilter.java:209) [ofbiz.jar:?]
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.ofbiz.webapp.control.ControlFilter.doFilter(ControlFilter.java:157) [ofbiz.jar:?]
> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:478) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:80) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:624) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342) [tomcat-catalina-8.5.16.jar:8.5.16]
> at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:799) [tomcat-coyote-8.5.16.jar:8.5.16]
> at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66) [tomcat-coyote-8.5.16.jar:8.5.16]
> at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868) [tomcat-coyote-8.5.16.jar:8.5.16]
> at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1455) [tomcat-coyote-8.5.16.jar:8.5.16]
> at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) [tomcat-coyote-8.5.16.jar:8.5.16]
> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_131]
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_131]
> at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-util-8.5.16.jar:8.5.16]
> at java.lang.Thread.run(Thread.java:748) [?:1.8.0_131]
> 2017-08-18 13:47:54,182 |jsse-nio-8443-exec-4 |ControlServlet |E| An error occurred, going to the errorPage: /error/error.jsp
> 2017-08-18 13:47:54,184 |jsse-nio-8443-exec-4 |ControlServlet |E| Including errorPage: /error/error.jsp
> {code}

--
This message was sent by Atlassian JIRA
(v6.4.14#64029)