Log inSkip to main contentSkip to sidebar
  • i2b2 JIRA
  • i2b2 Community Wiki
  • i2b2 Jira
i2b2 JIRA
  • More
    DashboardsProjectsIssues
  • Give feedback to Atlassian
  • Help
    • Jira Core help
    • Keyboard Shortcuts
    • About Jira
    • Jira Credits
  • Log In
i2b2 Web ClientProject Type: software

i2b2 Web Client

  • Issues
  • Reports
  • Components

Open issues

  • All issues
  • Open issues
  • Done issues
  • Viewed recently
  • Created recently
  • Resolved recently
  • Updated recently
View all issues and filters
Order by Priority
Order by Priority
  1. Bug
    WEBCLIENT-372Spooky "XSS" Popup in Webclient
  2. Bug
    WEBCLIENT-371Cannot drill down on terms in Search results
  3. Bug
    WEBCLIENT-368i2b2 webclient failed login
  4. Bug
    WEBCLIENT-370Typo in Term Info
  5. Bug
    WEBCLIENT-369Term "Info" incorrect for "inactive" leaves
Refresh results
Uploaded image for project: 'i2b2 Web Client'
  1. i2b2 Web Client
  2. WEBCLIENT-372

Spooky "XSS" Popup in Webclient

Log In
Export
    XMLWordPrintable

Details

    • Bug
    • Status: New
    • Major
    • Resolution: Unresolved
    • 1.8.2
    • None
    • Web Client
    • None
    • Community Data Enclave
    • Firefox, Safari

    Description

      On the "Community Enclave Demo" site (https://www.dataenclave.net/webclientv2/), I've been using the "i2b2 Demo" project to learn more about the demo ontology. When the user interface opens in that project, I see a popup that just says "XSS". To me, that indicates "cross-site scripting," which is a security no-no. So it looks spooky.

      I don't know what's causing that, or whether it actually indicates a security flaw, but a user could freak out when looking at that.

      See attached images for context. I did not see this same behavior when loading the other four projects (that are available to username "demo") on that site, only the i2b2 Demo project.

      Currently using Safari 18.4 and Firefox 138.0.1 on macOS 14.7.5 Sonoma.

      Attachments

        Attachments

          • Sort By Name
          • Sort By Date
          • Ascending
          • Descending
          • Thumbnails
          • List
          • Download All
        1. XSS Error Popup.png
          XSS Error Popup.png
          273 kB
          29/May/25 4:42 PM
        2. XSS Error Popup - Context.png
          XSS Error Popup - Context.png
          53 kB
          29/May/25 4:42 PM
        3. XSS Error Popup - Project.png
          XSS Error Popup - Project.png
          42 kB
          29/May/25 4:42 PM
        4. XSS Error Popup - Safari.png
          XSS Error Popup - Safari.png
          51 kB
          29/May/25 4:42 PM

        Activity

          • All
          • Comments
          • Work Log
          • History
          • Activity
          There are no comments yet on this issue.

          People

            Unassigned Unassigned
            markabajian Mark Abajian
            Mark Abajian
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              29/May/25 4:44 PM
              Updated:
              29/May/25 4:44 PM
              1 of 5
              • Atlassian Jira Project Management Software
              • About Jira
              • Report a problem

              Are you enjoying this new version of Jira? Please consider extending your license today.

              Atlassian
              {"report":{"fcp":595.7999999523163,"ttfb":167.10000002384186,"pageVisibility":"visible","entityId":13366,"key":"jira.project.issue.nav-detail","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":16,"apdex":0.5,"journeyId":"4676558e-0aef-4590-b6b4-19793ec06aa5","navigationType":0,"readyForUser":1173.5,"redirectCount":0,"resourceLoadedEnd":439.6999999284744,"resourceLoadedStart":172.29999995231628,"resourceTiming":[{"duration":5.300000071525574,"initiatorType":"link","name":"https://community.i2b2.org/jira/s/7fd763ecdf5ed1f47fc4d22fa8382e97-CDN/4x9nqn/820011/16zrvj4/49fa3aa3d35a2cc689cbf274e66cc41a/_/download/contextbatch/css/_super/batch.css","startTime":172.29999995231628,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":172.29999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":177.60000002384186,"responseStart":0,"secureConnectionStart":0},{"duration":5.799999952316284,"initiatorType":"link","name":"https://community.i2b2.org/jira/s/898b8076c5e82f53cd816ca393e45a56-CDN/4x9nqn/820011/16zrvj4/f614b50eeb842ebd1ea7ab2903699907/_/download/contextbatch/css/project.issue.navigator,jira.view.issue,jira.global,atl.general,-_super/batch.css?jira.create.linked.issue=true&richediton=true","startTime":172.60000002384186,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":172.60000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":178.39999997615814,"responseStart":0,"secureConnectionStart":0},{"duration":144,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/4c9c503fe98f210445831b0d7b0cdc33-CDN/4x9nqn/820011/16zrvj4/49fa3aa3d35a2cc689cbf274e66cc41a/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":172.69999992847443,"connectEnd":205.29999995231628,"connectStart":181,"domainLookupEnd":172.69999992847443,"domainLookupStart":172.69999992847443,"fetchStart":172.69999992847443,"redirectEnd":0,"redirectStart":0,"requestStart":205.5,"responseEnd":316.6999999284744,"responseStart":224.29999995231628,"secureConnectionStart":193.19999992847443},{"duration":162.60000002384186,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/694e598c1ae48b0f96655173631cd247-CDN/4x9nqn/820011/16zrvj4/f614b50eeb842ebd1ea7ab2903699907/_/download/contextbatch/js/project.issue.navigator,jira.view.issue,jira.global,atl.general,-_super/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":172.79999995231628,"connectEnd":209.69999992847443,"connectStart":182.19999992847443,"domainLookupEnd":172.79999995231628,"domainLookupStart":172.79999995231628,"fetchStart":172.79999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":209.79999995231628,"responseEnd":335.39999997615814,"responseStart":228.89999997615814,"secureConnectionStart":195.79999995231628},{"duration":64.60000002384186,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/53f54e0ac3f00bb56b136b4d2fff2853-CDN/4x9nqn/820011/16zrvj4/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":172.89999997615814,"connectEnd":223,"connectStart":198.79999995231628,"domainLookupEnd":172.89999997615814,"domainLookupStart":172.89999997615814,"fetchStart":172.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":223.10000002384186,"responseEnd":237.5,"responseStart":236.29999995231628,"secureConnectionStart":211},{"duration":103.60000002384186,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/d41d8cd98f00b204e9800998ecf8427e-CDN/4x9nqn/820011/16zrvj4/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":173,"connectEnd":261.7999999523163,"connectStart":237.29999995231628,"domainLookupEnd":173,"domainLookupStart":173,"fetchStart":173,"redirectEnd":0,"redirectStart":0,"requestStart":261.7999999523163,"responseEnd":276.60000002384186,"responseStart":275.6999999284744,"secureConnectionStart":249.69999992847443},{"duration":10.399999976158142,"initiatorType":"link","name":"https://community.i2b2.org/jira/s/30748292e4ca68be6947d7969829384b-CDN/4x9nqn/820011/16zrvj4/4f66da484ef7d95a2a604d3ab014374c/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":173.10000002384186,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":173.10000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":183.5,"responseStart":0,"secureConnectionStart":0},{"duration":181.69999992847443,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/d41d8cd98f00b204e9800998ecf8427e-CDN/4x9nqn/820011/16zrvj4/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":173.10000002384186,"connectEnd":340.5,"connectStart":316.60000002384186,"domainLookupEnd":173.10000002384186,"domainLookupStart":173.10000002384186,"fetchStart":173.10000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":340.5,"responseEnd":354.7999999523163,"responseStart":353.6999999284744,"secureConnectionStart":328.60000002384186},{"duration":200.70000004768372,"initiatorType":"script","name":"https://community.i2b2.org/jira/rest/api/1.0/shortcuts/820011/5c69e534a30b62def7b98bda0f001346/shortcuts.js?context=issuenavigation&context=issueaction","startTime":173.29999995231628,"connectEnd":359.5,"connectStart":335.1999999284744,"domainLookupEnd":173.29999995231628,"domainLookupStart":173.29999995231628,"fetchStart":173.29999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":359.60000002384186,"responseEnd":374,"responseStart":372.7999999523163,"secureConnectionStart":347.5},{"duration":1.899999976158142,"initiatorType":"link","name":"https://community.i2b2.org/jira/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/4x9nqn/820011/16zrvj4/efa42a25652b26dfd802540c024826b3/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":189.29999995231628,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":189.29999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":191.19999992847443,"responseStart":0,"secureConnectionStart":0},{"duration":205.19999992847443,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/8087506fefd02b4096991c90836b49f6-CDN/4x9nqn/820011/16zrvj4/efa42a25652b26dfd802540c024826b3/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":189.60000002384186,"connectEnd":379,"connectStart":354.6999999284744,"domainLookupEnd":189.60000002384186,"domainLookupStart":189.60000002384186,"fetchStart":189.60000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":379.10000002384186,"responseEnd":394.7999999523163,"responseStart":393.5,"secureConnectionStart":366.7999999523163},{"duration":215.80000007152557,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/d41d8cd98f00b204e9800998ecf8427e-CDN/4x9nqn/820011/16zrvj4/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":196.19999992847443,"connectEnd":397.7999999523163,"connectStart":373.89999997615814,"domainLookupEnd":196.19999992847443,"domainLookupStart":196.19999992847443,"fetchStart":196.19999992847443,"redirectEnd":0,"redirectStart":0,"requestStart":398,"responseEnd":412,"responseStart":411,"secureConnectionStart":386},{"duration":240.69999992847443,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/d41d8cd98f00b204e9800998ecf8427e-CDN/4x9nqn/820011/16zrvj4/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":199,"connectEnd":422.39999997615814,"connectStart":394.60000002384186,"domainLookupEnd":199,"domainLookupStart":199,"fetchStart":199,"redirectEnd":0,"redirectStart":0,"requestStart":422.60000002384186,"responseEnd":439.6999999284744,"responseStart":438.39999997615814,"secureConnectionStart":408.60000002384186},{"duration":179.70000004768372,"initiatorType":"xmlhttprequest","name":"https://community.i2b2.org/jira/rest/webResources/1.0/resources","startTime":503.7999999523163,"connectEnd":666.3999999761581,"connectStart":641.6999999284744,"domainLookupEnd":503.7999999523163,"domainLookupStart":503.7999999523163,"fetchStart":503.7999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":666.6999999284744,"responseEnd":683.5,"responseStart":682.7999999523163,"secureConnectionStart":654.2999999523163},{"duration":310.6999999284744,"initiatorType":"xmlhttprequest","name":"https://community.i2b2.org/jira/rest/orderbycomponent/latest/orderByOptions/primary","startTime":631.1000000238419,"connectEnd":924.2999999523163,"connectStart":893.1999999284744,"domainLookupEnd":631.1000000238419,"domainLookupStart":631.1000000238419,"fetchStart":631.1000000238419,"redirectEnd":0,"redirectStart":0,"requestStart":924.2999999523163,"responseEnd":941.7999999523163,"responseStart":940.2999999523163,"secureConnectionStart":910.6999999284744},{"duration":329.2000000476837,"initiatorType":"xmlhttprequest","name":"https://community.i2b2.org/jira/rest/menu/latest/appswitcher?_=1753008701470","startTime":702.7999999523163,"connectEnd":1016.5,"connectStart":991.6999999284744,"domainLookupEnd":702.7999999523163,"domainLookupStart":702.7999999523163,"fetchStart":702.7999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":1017.5,"responseEnd":1032,"responseStart":1030.8999999761581,"secureConnectionStart":1004.1000000238419},{"duration":428,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/d41d8cd98f00b204e9800998ecf8427e-CDN/4x9nqn/820011/16zrvj4/e65b778d185daf5aee24936755b43da6/_/download/contextbatch/js/browser-metrics-plugin.contrib,-_super,-project.issue.navigator,-atl.general/batch.js","startTime":723.6000000238419,"connectEnd":1136.1999999284744,"connectStart":1111.6999999284744,"domainLookupEnd":723.6000000238419,"domainLookupStart":723.6000000238419,"fetchStart":723.6000000238419,"redirectEnd":0,"redirectStart":0,"requestStart":1136.2999999523163,"responseEnd":1151.6000000238419,"responseStart":1150.6000000238419,"secureConnectionStart":1123.8999999761581},{"duration":405.60000002384186,"initiatorType":"xmlhttprequest","name":"https://community.i2b2.org/jira/secure/AjaxIssueAction!default.jspa?issueKey=WEBCLIENT-372&decorator=none&prefetch=false&shouldUpdateCurrentProject=false&loadFields=false&_=1753008701471","startTime":742.7999999523163,"connectEnd":1029.1000000238419,"connectStart":995,"domainLookupEnd":742.7999999523163,"domainLookupStart":742.7999999523163,"fetchStart":742.7999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":1030.1999999284744,"responseEnd":1148.3999999761581,"responseStart":1147.1000000238419,"secureConnectionStart":1015.1999999284744}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":3,"connectEnd":140,"secureConnectionStart":110,"requestStart":140,"responseStart":168,"responseEnd":199,"domLoading":171,"domInteractive":686,"domContentLoadedEventStart":686,"domContentLoadedEventEnd":718,"domComplete":1424,"loadEventStart":1424,"loadEventEnd":1425,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":664.6000000238419},{"name":"bigPipe.sidebar-id.end","time":665.3999999761581},{"name":"activityTabFullyLoaded","time":1168.5}],"measures":[],"correlationId":"7b2cbfb7c1b4dd","effectiveType":"4g","downlink":9.5,"rtt":0,"serverDuration":44,"dbReadsTimeInMs":0,"dbConnsTimeInMs":0,"applicationHash":"0629dd8d260e3954ece49053e565d01dabe11609","experiments":[]}}