[JIRA] (JENKINS-53733) % Character in Password Created Error in User Creation

2019-04-17 Thread afi...@gmail.com (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Andrew Figueroa edited a comment on  JENKINS-53733  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
  Re: % Character in Password Created Error in User Creation   
 

  
 
 
 
 

 
 Reproduced with Jenkins 2.164.2 on Windows with the following password: g6%xTIS9N8*3 Edit: I would argue that this is a minor issue since it is easy to circumvent by using a password that does not contain a % character.  Stack trace:{{java.lang.IllegalArgumentException: Not valid encoding '%xT'}}  \ {{ at org.eclipse.jetty.util.UrlEncoded.decodeHexByte(UrlEncoded.java:889)}}  \ {{ at org.eclipse.jetty.util.UrlEncoded.decodeUtf8To(UrlEncoded.java:522)}}  \ {{ at org.eclipse.jetty.util.UrlEncoded.decodeTo(UrlEncoded.java:577)}}  \ {{ at org.eclipse.jetty.server.Request.extractFormParameters(Request.java:551)}}  \ {{ at org.eclipse.jetty.server.Request.extractContentParameters(Request.java:475)}}  \ {{ at org.eclipse.jetty.server.Request.getParameters(Request.java:386)}}{{Caused: org.eclipse.jetty.http.BadMessageException: 400: Unable to parse form content}}  \ {{ at org.eclipse.jetty.server.Request.getParameters(Request.java:390)}}  \ {{ at org.eclipse.jetty.server.Request.getParameterNames(Request.java:1049)}}  \ {{ at javax.servlet.ServletRequestWrapper.getParameterNames(ServletRequestWrapper.java:212)}}  \ {{ at org.kohsuke.stapler.RequestImpl.getParameterNames(RequestImpl.java:190)}}  \ {{ at org.kohsuke.stapler.RequestImpl.bindParameters(RequestImpl.java:387)}}  \ {{ at org.kohsuke.stapler.RequestImpl.bindParameters(RequestImpl.java:383)}}  \ {{ at hudson.security.HudsonPrivateSecurityRealm$SignupInfo.(HudsonPrivateSecurityRealm.java:596)}}  \ {{ at hudson.security.HudsonPrivateSecurityRealm.validateAccountCreationForm(HudsonPrivateSecurityRealm.java:405)}}  \ {{ at hudson.security.HudsonPrivateSecurityRealm.createAccountFromSetupWizard(HudsonPrivateSecurityRealm.java:325)}}  \ {{ at jenkins.install.SetupWizard.doCreateAdminUser(SetupWizard.java:259)}}  \ {{ at java.lang.invoke.MethodHandle.invokeWithArguments(Unknown Source)}}  \ {{ at org.kohsuke.stapler.Function$MethodFunction.invoke(Function.java:396)}}  \ {{ at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:408)}}  \ {{ at org.kohsuke.stapler.interceptor.RequirePOST$Processor.invoke(RequirePOST.java:77)}}  \ {{ at org.kohsuke.stapler.PreInvokeInterceptedFunction.invoke(PreInvokeInterceptedFunction.java:26)}}  \ {{ at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:212)}}  \ {{ at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:145)}}  \ {{ at org.kohsuke.stapler.MetaClass data-model-type="hudson.model.Hudson" id="jenkins" class="yui-skin-sam two-column jenkins-2.164.2" data-version="2.164.2"1.doDispatch(MetaClass.java:537)}}  \ {{ at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:58)}}  \ {{ at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:739)}}{{Caused: javax.servlet.ServletException}}  \ {{ at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:789)}}  \ {{ at org.kohsuke.stapler.Stapler.invoke(Stapler.java:870)}}  \ {{ at org.kohsuke.stapler.MetaClass>.doDispatch(MetaClass.java:221)}}  \ {{ at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:58)}}  \ {{ at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:739)}}  \ {{ at org.kohsuke.stapler.Stapler.invoke(Stapler.java:870)}}  \ {{ at org.kohsuke.stapler.Stapler.invoke(Stapler.java:668)}}  \ {{ at org.kohsuke.stapler.Stapler.service(Stapler.java:238)}}  \ {{ at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)}}  \ {{ at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:865)}}  \ {{ at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(Ser

[JIRA] (JENKINS-53733) % Character in Password Created Error in User Creation

2019-04-17 Thread afi...@gmail.com (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Andrew Figueroa commented on  JENKINS-53733  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
  Re: % Character in Password Created Error in User Creation   
 

  
 
 
 
 

 
 Reproduced with Jenkins 2.164.2 on Windows with the following password: g6%xTIS9N8*3   Stack trace: java.lang.IllegalArgumentException: Not valid encoding '%xT' {{ at org.eclipse.jetty.util.UrlEncoded.decodeHexByte(UrlEncoded.java:889)}} {{ at org.eclipse.jetty.util.UrlEncoded.decodeUtf8To(UrlEncoded.java:522)}} {{ at org.eclipse.jetty.util.UrlEncoded.decodeTo(UrlEncoded.java:577)}} {{ at org.eclipse.jetty.server.Request.extractFormParameters(Request.java:551)}} {{ at org.eclipse.jetty.server.Request.extractContentParameters(Request.java:475)}} {{ at org.eclipse.jetty.server.Request.getParameters(Request.java:386)}} Caused: org.eclipse.jetty.http.BadMessageException: 400: Unable to parse form content {{ at org.eclipse.jetty.server.Request.getParameters(Request.java:390)}} {{ at org.eclipse.jetty.server.Request.getParameterNames(Request.java:1049)}} {{ at javax.servlet.ServletRequestWrapper.getParameterNames(ServletRequestWrapper.java:212)}} {{ at org.kohsuke.stapler.RequestImpl.getParameterNames(RequestImpl.java:190)}} {{ at org.kohsuke.stapler.RequestImpl.bindParameters(RequestImpl.java:387)}} {{ at org.kohsuke.stapler.RequestImpl.bindParameters(RequestImpl.java:383)}} {{ at hudson.security.HudsonPrivateSecurityRealm$SignupInfo.(HudsonPrivateSecurityRealm.java:596)}} {{ at hudson.security.HudsonPrivateSecurityRealm.validateAccountCreationForm(HudsonPrivateSecurityRealm.java:405)}} {{ at hudson.security.HudsonPrivateSecurityRealm.createAccountFromSetupWizard(HudsonPrivateSecurityRealm.java:325)}} {{ at jenkins.install.SetupWizard.doCreateAdminUser(SetupWizard.java:259)}} {{ at java.lang.invoke.MethodHandle.invokeWithArguments(Unknown Source)}} {{ at org.kohsuke.stapler.Function$MethodFunction.invoke(Function.java:396)}} {{ at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:408)}} {{ at org.kohsuke.stapler.interceptor.RequirePOST$Processor.invoke(RequirePOST.java:77)}} {{ at org.kohsuke.stapler.PreInvokeInterceptedFunction.invoke(PreInvokeInterceptedFunction.java:26)}} {{ at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:212)}} {{ at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:145)}} {{ at org.kohsuke.stapler.MetaClass data-model-type="hudson.model.Hudson" id="jenkins" class="yui-skin-sam two-column jenkins-2.164.2" data-version="2.164.2"1.doDispatch(MetaClass.java:537)}} {{ at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:58)}} {{ at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:739)}} Caused: javax.servlet.ServletException {{ at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:789)}} {{ at org.kohsuke.stapler.Stapler.invoke(Stapler.java:870)}} {{ at org.kohsuke.stapler.MetaClass>.doDispatch(MetaClass.java:221)}} {{ at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:58)}} {{ at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:739)}} {{ at org.kohsuke.stapler.Stapler.invoke(Stapler.java:870)}} {{ at org.kohsuke.stapler.Stapler.invoke(Stapler.java:668)}} {{ at org.kohsuke.stapler.Stapler.service(Stapler.java:238)}} {{ at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)}} {{ at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:865)}} {{ at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1655)}} {{ at hudson.util.PluginServletFilter data-model-type="hudson.model.Hudson" id="jenkins" class="yui-skin-sam two-column jenkins-2.164.2" data-version="2.164.2".doFilter(PluginServletFilter.java:154)}} {{ at hudson.security.HudsonPrivate