0006940: implement more validation logic for payto URIs

ID	Project	Category	View Status	Date Submitted	Last Update
0006940	Taler	exchange	public	2021-07-23 11:19	2021-08-24 14:22

Reporter	Florian Dold	Assigned To	Christian Grothoff	Resolution deadline
Implementer		Reviewer
Release signed by		Deployed by
Verifier		Communicator
Data protection authority notification required	No
CSIRT notification required	No
Estimated effort (hours)		Actual effort (hours)	0
Fast-track	No
Work package	none
Priority	normal	Severity	minor	Reproducibility	have not tried
Status	closed	Resolution	fixed
Product Version	git (master)
Target Version	0.8	Fixed in Version	0.8

Summary	0006940: implement more validation logic for payto URIs
Description	We want to make sure they are a well-formed URI. In particular, there may not be characters like "\n" or "<", ">", which might cause downstream problems with XSS.
Tags	No tags attached.

Date Modified	Username	Field	Change
2021-07-23 11:19	Florian Dold	New Issue
2021-07-23 11:19	Florian Dold	Status	new => assigned
2021-07-23 11:19	Florian Dold	Assigned To	=> Christian Grothoff
2021-07-23 12:22	Christian Grothoff	Assigned To	Christian Grothoff =>
2021-07-23 12:22	Christian Grothoff	Status	assigned => implementing
2021-08-01 13:02	Christian Grothoff	Assigned To	=> Christian Grothoff
2021-08-01 13:02	Christian Grothoff	Status	implementing => assigned
2021-08-01 13:02	Christian Grothoff	Product Version	=> git (master)
2021-08-01 13:02	Christian Grothoff	Target Version	=> 0.8
2021-08-02 17:44	Christian Grothoff	Status	assigned => informing
2021-08-02 17:44	Christian Grothoff	Resolution	open => fixed
2021-08-02 17:44	Christian Grothoff	Fixed in Version	=> 0.8
2021-08-02 17:44	Christian Grothoff	Note Added: 0018053
2021-08-24 14:22	Christian Grothoff	Status	informing => closed

Christian Grothoff 2021-08-02 17:44 manager ~0018053	Extended payto validation logic is now in TALER_payto_validate(), which is also used consistently (AFAIK) across the code.