bugreport.java.com has multiple issues

some-java-user-99206970363698485155 at vodafonemail.de some-java-user-99206970363698485155 at vodafonemail.de
Sun Sep 20 21:33:22 UTC 2020


Hello,
I am writing this here because, while `web-discuss` appears to be more appropriate, it looks like no 
one is actually reading (or at least responding to) any of the mails there.

https://bugreport.java.com/bugreport/submit_start.do has multiple issues which makes reporting bugs 
annoying, it would be good if they could be fixed:
1. When you press "Submit" but the report is missing required information (other than "Submitter 
Information") the encoding of text you have already written is messed up if it is non-ASCII. To 
reproduce:
  1. Open https://bugreport.java.com/bugreport/submit_start.do
  2. Enter all "Submitter Information" (values do not matter) and enter any captcha value
  3. Use non-ASCII text in any of the other fields, e.g. use "öä" as "Synopsis"
  4. Press "Submit"
  5. Look at the "Synopsis" again -> It is now "öä"
2. When you press "Submit" but the report is missing required information (other than "Submitter 
Information") it can cause HTML injection. To reproduce:
  1. Open https://bugreport.java.com/bugreport/submit_start.do
  2. Enter all "Submitter Information" (values do not matter) and enter any captcha value
  3. Use `'<'` as "Description"
  4. Press "Submit"
  5. Look at the "Description" again -> It now contains the HTML code of the "Reproducing the Issue" 
     steps
3. Transformation to Jira issue messes up encoding. It appears regardless of issue 1, when the report 
contains non-ASCII text, the content ends up message up on Jira. E.g. when using `§` in the 
description it becomes `§` on Jira. There are dozens of issues where this is visible and it likely 
makes anything encoding related pretty difficult to review by the JDK developers.
4. "Operating System" is always required, even when reporting documentation issues which are OS 
independent.
5. "Company" as part of "Submitter Information" is marked as required even though its value does not 
matter. This field should be optional.
(6.) The "Oracle" logo in the top left corner has a different background color than the surrounding, making it look rather weird. (It has a slightly brighter gray and has partially even a complete white 
background.)
(7.) When the page is experiencing technical difficulties, it redirects to HTTP site. See also 
https://mail.openjdk.java.net/pipermail/web-discuss/2020-July/000581.html
(8.) It appears when selecting the separators "--- EARLY ACCESS RELEASES ---" or "--- EARLIER 
RELEASES ---" as "Java Release" they are considered valid versions; at least the yellow "Please 
complete the required fields listed below" warning box does not complain about them.

Kind regards


More information about the discuss mailing list