[DRE-maint] Bug#705533: redmine: html escape? problem in the administration/settings dialog, projects and repositories tab

Tue Apr 16 09:19:00 UTC 2013

Package: redmine
Version: 1.0.1-2
Severity: normal
Tags: upstream

problem occured after safe-upgrade

As an administrator for redmine,
u can use the webinterface for the administration/settings dialog.
In this dialog the projects and repositories tab have a a problem with listing checkboxes rendering them useless,
it is impossible to use them, so u cannot choose a scm or set the default project settings anymore (workaround for the advanced, directly edit the redmine database, settings table)

an example:
this the html that is shown:
Enabled SCM<label class="block"><input checked="checked" id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Subversion" />Subversion</label><label class="block"><input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Darcs" />Darcs</label><label class="block"><input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Mercurial" />Mercurial</label><label class="block"><input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Cvs" />Cvs</label><label class="block"><input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Bazaar" />Bazaar</label><label class="block"><input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Git" />Git</label><label class="block"><input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Filesystem" />Filesystem</label>
where one would expect the actual check boxes to be chown,
the html source code on this page for this is:
<p><label>Enabled SCM</label><input id="settings_enabled_scm_" name="settings[enabled_scm][]" value="" type="hidden"><
label class="block"><input checked="checked" id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Subversion" />
Subversion</label><label class="block"><input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Darcs" />Darcs</label><
label class="block"><input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Mercurial" />Mercurial</label><
label class="block"><input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Cvs" />Cvs</label><label class="block"><
input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Bazaar" />Bazaar</label><label class="block"><
input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Git" />Git</label><label class="block"><
input id="settings_enabled_scm_" name="settings[enabled_scm][]" type="checkbox" value="Filesystem" />Filesystem</label></p>
so the code that is shown to the user should be the html source code

possible causes:
unlike utf8, sql_ascii encoding database, i already tested this with different encodings, no change
most likely: ruby related packages upgrade, i could recreate the problem i a virtual environment, the problem occurs right after the upgrade

upgraded packages:
  acpid apache2 apache2-mpm-prefork apache2-suexec apache2-utils 
  apache2.2-bin apache2.2-common at base-files bind9-host bogofilter 
  bogofilter-bdb bogofilter-common browser-plugin-gnash bzip2 cpufrequtils 
  cups cups-bsd cups-client cups-common cups-pk-helper cups-ppdc cvs dbus 
  dbus-x11 debian-archive-keyring dnsutils dpkg dpkg-dev evince 
  evince-common evolution-data-server evolution-data-server-common exim4 
  exim4-base exim4-config exim4-daemon-heavy file foomatic-filters 
  fusionforge-standard gforge-common gforge-db-postgresql 
  gforge-lists-mailman gforge-mta-exim4 gforge-plugin-scmcvs 
  gforge-plugin-scmgit gforge-plugin-scmsvn gforge-shell-postgresql 
  gforge-web-apache2 ghostscript ghostscript-cups gimp gimp-data 
  gir1.0-json-glib-1.0 gnash gnash-common gnupg gpgv gzip host hpijs hplip 
  hplip-cups hplip-data iceweasel imagemagick initscripts isc-dhcp-client 
  isc-dhcp-common libactionmailer-ruby libactionmailer-ruby1.8 
  libactionpack-ruby libactionpack-ruby1.8 libactiverecord-ruby1.8 
  libactiveresource-ruby libactiveresource-ruby1.8 libactivesupport-ruby 
  libactivesupport-ruby1.8 libapache2-mod-fcgid libapache2-mod-perl2 
  libapache2-mod-php5 libapr1 libarchive1 libavcodec52 libavformat52 
  libavutil49 libbind9-60 libbrlapi0.5 libbz2-1.0 libc-bin libc-dev-bin 
  libc6 libc6-dev libc6-i686 libcamel1.2-14 libconfig-inifiles-perl 
  libcpufreq0 libcups2 libcupscgi1 libcupsdriver1 libcupsimage2 
  libcupsmime1 libcupsppdc1 libcurl3-gnutls libdbd-pg-perl libdbus-1-3 
  libdbus-glib-1-2 libdns69 libdpkg-perl libebackend1.2-0 libebook1.2-9 
  libecal1.2-7 libedata-book1.2-2 libedata-cal1.2-7 libedataserver1.2-13 
  libedataserverui1.2-8 libegroupwise1.2-13 libevince2 libexif12 libexpat1 
  libfreetype6 libgc1c2 libgdata-common libgdata-google1.2-1 libgdata1.2-1 
  libgdata7 libgimp2.0 libgnutls26 libgs8 libgssapi-krb5-2 libgssrpc4 
  libhpmud0 libicu44 libisc62 libisccc60 libisccfg62 libjasper1 
  libjson-glib-1.0-0 libk5crypto3 libkadm5clnt-mit7 libkadm5srv-mit7 
  libkdb5-4 libkrb5-3 libkrb5support0 libldap-2.4-2 liblwres60 libmagic1 
  libmagick++3 libmagickcore3 libmagickcore3-extra libmagickwand3 
  libmodplug1 libmono-cairo2.0-cil libmono-corlib2.0-cil 
  libmono-i18n-west2.0-cil libmono-posix2.0-cil libmono-security2.0-cil 
  libmono-sharpzip2.84-cil libmono-system2.0-cil libmozjs2d libmtp8 
  libmysqlclient16 libnautilus-extension1 libnm-glib-vpn1 libnm-glib2 
  libnm-util1 libnss3-1d libopenjpeg2 libperl5.10 libpng12-0 
  libpolkit-agent-1-0 libpolkit-backend-1-0 libpolkit-gobject-1-0 
  libpoppler-glib4 libpoppler5 libpostproc51 libpq5 libproxy0 libraptor1 
  librpm1 librpmio1 libsane-hpaio libservlet2.5-java libsmbclient 
  libsoup-gnome2.4-1 libsoup2.4-1 libssh-4 libssl0.9.8 libswscale0 libt1-5 
  libtasn1-3 libtiff4 libvorbis0a libvorbisenc2 libvorbisfile3 
  libvte-common libvte9 libwbclient0 libwebkit-1.0-2 libwebkit-1.0-common 
  libxi6 libxml2 libxml2-utils libxslt1.1 linux-base 
  linux-headers-2.6.32-5-686 linux-headers-2.6.32-5-common 
  linux-image-2.6.32-5-686 linux-libc-dev locales lockfile-progs 
  module-init-tools mono-2.0-gac mono-gac mono-runtime mutt mysql-common 
  nautilus nautilus-data network-manager nfs-common nscd openjdk-6-jre 
  openjdk-6-jre-headless openjdk-6-jre-lib openoffice.org 
  openoffice.org-base openoffice.org-base-core openoffice.org-calc 
  openoffice.org-common openoffice.org-core openoffice.org-draw 
  openoffice.org-emailmerge openoffice.org-evolution 
  openoffice.org-filter-binfilter openoffice.org-filter-mobiledev 
  openoffice.org-gcj openoffice.org-gnome openoffice.org-gtk 
  openoffice.org-help-en-gb openoffice.org-help-en-us 
  openoffice.org-impress openoffice.org-java-common 
  openoffice.org-l10n-en-gb openoffice.org-math openoffice.org-officebean 
  openoffice.org-report-builder-bin openoffice.org-style-galaxy 
  openoffice.org-style-tango openoffice.org-writer openssh-client 
  openssh-server openssl perl perl-base perl-modules perlmagick php5 
  php5-cgi php5-cli php5-common php5-gd php5-pgsql policykit-1 
  poppler-utils postgresql postgresql-8.4 postgresql-client-8.4 
  postgresql-client-common postgresql-common procps python python-brlapi 
  python-crypto python-debian python-libxml2 python-minimal python-pam 
  python-uno python-vte rails rails-ruby1.8 rpm-common rpm2cpio sudo 
  sysv-rc sysvinit sysvinit-utils ttf-opensymbol tzdata tzdata-java 
  uno-libs3 ure virtualbox-ose-guest-dkms virtualbox-ose-guest-utils 
  virtualbox-ose-guest-x11 x11-common xbase-clients xorg xserver-common 
  xserver-xephyr xserver-xorg xserver-xorg-core xserver-xorg-input-all 
  xserver-xorg-video-all xserver-xorg-video-intel xsltproc xulrunner-1.9.1 
of which only the ruby are relevant (just giving the full upgrade in the highly unlikely case that the problem persists elsewhere)

upgraded ruby packages:
  libactionmailer-ruby libactionmailer-ruby1.8 
  libactionpack-ruby libactionpack-ruby1.8 libactiverecord-ruby1.8 
  libactiveresource-ruby libactiveresource-ruby1.8 libactivesupport-ruby 
  libactivesupport-ruby1.8 rails rails-ruby1.8  

previous ruby versions where the problem didn't occur where 1 year old,
the replacement log from virtual machine, (the same problem on frequently updated machines, but no log..):
Preparing to replace libactivesupport-ruby 2.3.5-1.2+squeeze2 (using .../libactivesupport-ruby_2.3.5-1.2+squeeze8_all.deb) ...
Unpacking replacement libactivesupport-ruby ...
Preparing to replace rails-ruby1.8 2.3.5-1.2+squeeze2 (using .../rails-ruby1.8_2.3.5-1.2+squeeze8_all.deb) ...
Unpacking replacement rails-ruby1.8 ...
Preparing to replace libactiverecord-ruby1.8 2.3.5-1.2+squeeze2 (using .../libactiverecord-ruby1.8_2.3.5-1.2+squeeze8_all.deb) ...
Unpacking replacement libactiverecord-ruby1.8 ...
Preparing to replace libactivesupport-ruby1.8 2.3.5-1.2+squeeze2 (using .../libactivesupport-ruby1.8_2.3.5-1.2+squeeze8_all.deb) ...
Unpacking replacement libactivesupport-ruby1.8 ...
Preparing to replace libactionpack-ruby 2.3.5-1.2+squeeze2 (using .../libactionpack-ruby_2.3.5-1.2+squeeze8_all.deb) ...
Unpacking replacement libactionpack-ruby ...
Preparing to replace libactionmailer-ruby 2.3.5-1.2+squeeze2 (using .../libactionmailer-ruby_2.3.5-1.2+squeeze8_all.deb) ...
Unpacking replacement libactionmailer-ruby ...
Preparing to replace libactionmailer-ruby1.8 2.3.5-1.2+squeeze2 (using .../libactionmailer-ruby1.8_2.3.5-1.2+squeeze8_all.deb) ...
Unpacking replacement libactionmailer-ruby1.8 ...
Preparing to replace libactionpack-ruby1.8 2.3.5-1.2+squeeze2 (using .../libactionpack-ruby1.8_2.3.5-1.2+squeeze8_all.deb) ...
Unpacking replacement libactionpack-ruby1.8 ...
Preparing to replace libactiveresource-ruby 2.3.5-1.2+squeeze2 (using .../libactiveresource-ruby_2.3.5-1.2+squeeze8_all.deb) ...
Unpacking replacement libactiveresource-ruby ...
Preparing to replace libactiveresource-ruby1.8 2.3.5-1.2+squeeze2 (using .../libactiveresource-ruby1.8_2.3.5-1.2+squeeze8_all.deb) ...
Unpacking replacement libactiveresource-ruby1.8 ...

mvg,
Wim

-- System Information:
Debian Release: 6.0.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages redmine depends on:
ii  dbconfig-common      1.8.46+squeeze.0    common framework for packaging dat
ii  debconf [debconf-2.0 1.5.36.1            Debian configuration management sy
ii  libactionmailer-ruby 2.3.5-1.2+squeeze8  Framework for generation of custom
ii  libactionpack-ruby   2.3.5-1.2+squeeze8  Controller and View framework used
ii  libactiveresource-ru 2.3.5-1.2+squeeze8  Connects objects and REST web serv
ii  libactivesupport-rub 2.3.5-1.2+squeeze8  utility classes and extensions (Ru
ii  libjs-scriptaculous  1.8.3-1             JavaScript library for dynamic web
ii  rails                2.3.5-1.2+squeeze8  MVC ruby based framework geared fo
ii  redmine-pgsql        1.0.1-2             metapackage providing PostgreSQL d
ii  ruby                 4.5                 An interpreter of object-oriented 
ii  ruby1.8              1.8.7.302-2squeeze1 Interpreter of object-oriented scr

redmine recommends no packages.

Versions of packages redmine suggests:
pn  libopenid-ruby                <none>     (no description available)
pn  librmagick-ruby               <none>     (no description available)
pn  libsvn-ruby                   <none>     (no description available)

-- debconf information:
  redmine/instances/default/passwords-do-not-match:
  redmine/instances/default/remote/newhost:
  redmine/instances/default/db/basepath:
  redmine/instances/default/pgsql/changeconf: false
  redmine/instances/default/missing-db-package-error: abort
  redmine/default-language: ${defaultLocale}
  redmine/instances/default/pgsql/no-empty-passwords:
  redmine/instances/default/pgsql/method: unix socket
* redmine/instances/default/database-type: pgsql
  redmine/instances/default/pgsql/manualconf:
  redmine/instances/default/pgsql/authmethod-admin: ident
  redmine/instances/default/pgsql/admin-user: postgres
  redmine/missing-redmine-package:
  redmine/instances/default/pgsql/authmethod-user: password
  redmine/instances/default/dbconfig-reinstall: false
  redmine/instances/default/db/app-user: redmine
  redmine/instances/default/default-language: en
  redmine/notify-migration:
  redmine/old-instances:
  redmine/instances/default/upgrade-error: abort
  redmine/instances/default/db/dbname: redmine_default
  redmine/instances/default/purge: false
  redmine/current-instances: default
  redmine/instances/default/remote/host:
  redmine/instances/default/dbconfig-upgrade: true
  redmine/instances/default/internal/reconfiguring: false
  redmine/instances/default/upgrade-backup: true
  redmine/instances/default/install-error: abort
  redmine/instances/default/mysql/admin-user: root
  redmine/instances/default/mysql/method: unix socket
  redmine/instances/default/internal/skip-preseed: false
  redmine/instances/default/remove-error: abort
  redmine/instances/default/dbconfig-remove:
  redmine/instances/default/remote/port:
* redmine/instances/default/dbconfig-install: true