Profile

Cover photo
klas b
Lived in moon, mars
22,752 views
AboutPostsPhotosVideos+1'sReviews

Stream

klas b

Shared publicly  - 
 
My 5 cents on JComponent helper returning wrong results:

I sent this report to the JSST on 26.7.11, never got any reply about its content, just standard thank you blabla... I originally sent this to JSST as wrong result of this function combined with vulnerable extension could be a potential danger, but after more than one year it is safe to claim they decided it is not an issue so IMHO it is safe to publish. Also function has apparently not changed since 2009, which is being discussed in a topic.

====================================================

Perhaps just this clarification for result column:
OK - component renders,
NOT_FOUND - system returns COMPONENT NOT FOUND status
Marked by red fields are results when under specified conditions component renders  when it should indeed return NOT_FOUND.  In combination with vulnerable extension this could lead to security breach.

Orange marks conditions when issue is a functional bug, but IMHO not a security problem.

EDIT: Forgot to add this: it becomes a security issue if someone relies on Disable to prevent unsafe users from accessing vulnerable component (backend - second red OK) or when vulnerable component is deinstalled from database (== not installed) but files remain there (e.g. due to file permission problems) - this is valid fro the frontend first red OK). Not a release triggering issue, but should be fixed anyway.
1
Add a comment...

klas b

Shared publicly  - 
 
Joomla Extension developers - now is the time to test your old content elements with Joomfish 2.5. & report issues you might find https://github.com/JoomFish/jf-future
1
Add a comment...

klas b

Shared publicly  - 
1
Add a comment...

klas b

Shared publicly  - 
The awards for design, creativity and innovation on the Internet, which recognize and promote the best web designers in the world. Read more. Create your account; Login. Website Awards; Jury 2011; Win...
1
klas b's profile photo
klas b
 
with 10 ofc :) he he
Add a comment...
Places
Map of the places this user has livedMap of the places this user has livedMap of the places this user has lived
Previously
moon, mars
Basic Information
Gender
Male
klas b's +1's are the things they like, agree with, or want to recommend.
Joogpot Selection: October 2013
joogpot.eu

A round-up of the most awesome, outstanding and amazing websites built with Joomla!

The LanternFish - Joomla! Extensions Directory
extensions.joomla.org

The LanternFish, a fresh, but mature translation manager for Joomla!. It enhances Joomla multilingual capabilities with new features to give

Joomla 3 extension development book contest
joogpot.eu

A magazine on Joomla, webdesign, website building and related topics

Joogpot Selection: July 2013
joogpot.eu

A monthly round-up of the most awesome, outstanding and amazing websites built with Joomla!

Letalske karte
www.belmondo.si

Letalske karte nizkocenovnih in rednih letalskih prevoznikov po najnižjih možnih cenah, online iskanje in nakup. Vozovnice je mogoče kupite

Daegu: Kozmus bronast
www.vecer.com

Primož Kozmus (Brežice), zlati olimpijec in branilec naslova, je tretji dan 13. atletskega svetovnega prvenstva ...

Old, max 3 stars
Quality: Poor - FairFacilities: Poor - FairService: Good
Public - a year ago
reviewed a year ago
1 review
Map
Map
Map