#5814 - Possibly no validation on disable_cron_hook
| Identifier | #5814 |
|---|---|
| Issue type | Minor issue (breaks specific functionality) |
| Title | Possibly no validation on disable_cron_hook |
| Status | Completed |
| Tags |
Roadmap: v11 (custom) |
| Handling member | PDStig |
| Version | 11 beta1 |
| Addon | errorlog |
| Description | There might not be any validation happening on the disable_cron_hook type. ZAP was able to attempt a database entry into cron_progression for an invalid c_hook. |
| Steps to reproduce | |
| Funded? | No |
| Commits |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".


Comments
There was no validation when enabling/disabling a cron hook, making it possible to inject bogus names as the ids into the database.