Modify ↓
Opened 5 years ago
Closed 5 years ago
#18537 closed enhancement (wontfix)
Display HTML error messages from the OSM API
| Reported by: | Don-vip | Owned by: | team |
|---|---|---|---|
| Priority: | minor | Milestone: | |
| Component: | Core | Version: | |
| Keywords: | html error | Cc: |
Description
We should display proper HTML instead of this:
https://twitter.com/Kumar17640520/status/1214856992642125824
Attachments (1)
Change History (6)
by , 5 years ago
| Attachment: | ENwJ_d7VUAAhLpV.jpg added |
|---|
comment:1 by , 5 years ago
| Priority: | normal → minor |
|---|---|
| Type: | defect → enhancement |
follow-up: 3 comment:2 by , 5 years ago
comment:3 by , 5 years ago
comment:4 by , 5 years ago
- It may be large (serveral pages)
- It may contain elements going AMOK in the limited HTML handler of Java
- We don't know the source of HTML (as it is not a normal behaviour), so it can be intentional be dangerous
- Users don't expect dialogs to be controlled by remote server, so contrary to a webbrowser they will not be wary
I.e. That's one of the typical situations opening massive security holes.
Note:
See TracTickets
for help on using tickets.
Not so easy. An 50x error should never happen so we can't really assume a certain layout. And directly displaying HTML from the server in the dialog is dangerous. I'm not sure if we really should handle that case.