Skip to content

XHTML templates Don't Use Schema URNs #6661

@astorm

Description

@astorm

Preconditions

  1. Magento 2.1.1 installed via integrator method

Steps to reproduce

  1. Open any XHTML template in the system (vendor/magento//module-ui/view/base/ui_component/templates/container/default.xhtml, or vendor/magento//module-ui/view/base/ui_component/templates/export/button.xhtml, or vendor/magento//module-ui/view/base/ui_component/templates/form/collapsible.xhtml, or vendor/magento//module-ui/view/base/ui_component/templates/form/default.xhtml, or vendor/magento//module-ui/view/base/ui_component/templates/listing/default.xhtml)
  2. Examine the xsi:noNamespaceSchemaLocation attribute

Expected result

  1. I see a urn style path (xsi:noNamespaceSchemaLocation="urn:magento:framework:ObjectManager/etc/config.xsd")

Actual result

  1. I see an upwards directory traversal path (../../../../../../Ui/etc/ui_template.xsd)

Metadata

Metadata

Assignees

Labels

Area: FrontendFixed in 2.2.xThe issue has been fixed in 2.2 release lineFixed in 2.3.xThe issue has been fixed in 2.3 release lineIssue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedIssue: Format is validGate 1 Passed. Automatic verification of issue format passedIssue: Ready for WorkGate 4. Acknowledged. Issue is added to backlog and ready for developmentReproduced on 2.1.xThe issue has been reproduced on latest 2.1 releaseReproduced on 2.2.xThe issue has been reproduced on latest 2.2 releaseReproduced on 2.3.xThe issue has been reproduced on latest 2.3 releasebug report

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions