-
Notifications
You must be signed in to change notification settings - Fork 807
Closed
Labels
BugAn error, flaw, misbehavior or failure in the Monkey or Monkey Island.An error, flaw, misbehavior or failure in the Monkey or Monkey Island.Complexity: MediumImpact: Highsp/3
Milestone
Description
Describe the bug
The configuration UI prints a red warning message if invalid configuration options are provided, but the user is still able to submit invalid configurations. This could lead to unpredictable behavior, which is not acceptable for a production-safe simulation.
Example:
If you submit "1.3" as an IP address, you will be warned that it is invalid, but allowed to submit it anyway. Linux expands this to 1.0.0.3, while Windows does not recognize it as a valid IP address. 1.0.0.3 is likely not what you meant when you entered "1.3", so the monkey will be scanning hosts you did not intend. This behavior is both unpredictable and inconsistent across platforms.
To Reproduce
Steps to reproduce the behavior:
- Open the configuration screen on Monkey Island
- Input an invalid IP address in the network tab
- Click "submit"
- Export the config in plaintext and inspect the config to verify that the invalid IP address was added to the configuration.
Expected behavior
Users should not be able to submit invalid configurations.
Tasks
Metadata
Metadata
Assignees
Labels
BugAn error, flaw, misbehavior or failure in the Monkey or Monkey Island.An error, flaw, misbehavior or failure in the Monkey or Monkey Island.Complexity: MediumImpact: Highsp/3