[Tracker-discuss] [issue556] Server error when trying to change password

[R David Murray]

R David Murray added the comment:

Here is the traceback from the log.  My guess would be that the problem is due to the relatively recent (three months or so?) cross site scripting security fixes, which are preventing the real error message (whatever it is) from getting rendered.

10.0.0.1 - - [10/Nov/2014 12:23:10] "POST /tracker/user18940 HTTP/1.1" 400 -
EXCEPTION AT Mon Nov 10 12:23:10 2014
Traceback (most recent call last):
  File "/home/roundup/lib/python2.6/site-packages/roundup/scripts/roundup_server.py", line 204, in run_cgi
    self.inner_run_cgi()
  File "/home/roundup/lib/python2.6/site-packages/roundup/scripts/roundup_server.py", line 397, in inner_run_cgi
    tracker.Client(tracker, self, env).main()
  File "/home/roundup/lib/python2.6/site-packages/roundup/cgi/client.py", line 380, in main
    self.inner_main()
  File "/home/roundup/lib/python2.6/site-packages/roundup/cgi/client.py", line 542, in inner_main
    self.renderFrontPage(message)
  File "/home/roundup/lib/python2.6/site-packages/roundup/cgi/client.py", line 1112, in renderFrontPage
    self.add_error_message(message)
  File "/home/roundup/lib/python2.6/site-packages/roundup/cgi/client.py", line 419, in add_error_message
    add_message(self._error_message, msg, escape)
  File "/home/roundup/lib/python2.6/site-packages/roundup/cgi/client.py", line 53, in add_message
    msg = cgi.escape(msg).replace('\n', '<br />\n')
  File "/usr/lib/python2.6/cgi.py", line 1035, in escape
    s = s.replace("&", "&") # Must be done first!
AttributeError: 'Unauthorised' object has no attribute 'replace'

----------
nosy: +r.david.murray
status: unread -> chatting

_______________________________________________________
PSF Meta Tracker <metatracker at psf.upfronthosting.co.za>
<http://psf.upfronthosting.co.za/roundup/meta/issue556>
_______________________________________________________