Guest

Preview Tool

Cisco Bug: CSCsg39727 - WebVPN not mangling paths within HTML Comments

Last Modified

Feb 22, 2014

Products (1)

  • Cisco VPN 3000 Series Concentrators

Known Affected Releases

4.1(7)

Description (partial)

Symptom:

When accessing a webpage through Webvpn code within comments in the HTML which contains a path does not have this path modified.
 
Going direct to the page in question a section of the source code is as follows: 

<link rel="stylesheet" type="text/css" href="/css/editor.css" />
The corresponding source code via WebVPN is as follows:

<link rel="stylesheet" type="text/css" href="/http/0/vpn.test.com/css/editor.css" />
As can be seen, the code not within comments has the path "/css/"
modified to "http/0/vpn.test.com/css/" via WebVPN and therefore this part of the page displays correctly. However, the code within comments is unmodified, "/css/" remains "/css/", and so the path cannot be found via WebVPN and this part of the page fails to display correctly.
Conditions:

Accessing a page with HTML comments through WebVPN
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.