Upgrade to XI 5.2.6 broke a graph

[BanditBBS]

So I just upgraded my dev server to XI 5.2.6 and one of the graphs on my dashboard is now showing up blank with the words "XSS Detected. Object does not exist"

I can't see any graphs for this service anywhere.

[tmcdonald]

sed -i 's/nagiosccm_get_service_id/get_service_id/' /usr/local/nagiosxi/html/includes/components/graphexplorer/visFunctions.inc.php

Known issue, will be fixed in the next release.

[BanditBBS]

didn't fix it. I verified the substitute worked, refreshed page source, closed all browsers, relaunched......Still showing the error on the graph on my home dashboard.

[jomann]

Hey Bandit,

What is the object that is having a problem? Is it a host or service and is it a static one from a configuration file or is it defined in the CCM?

[BanditBBS]

Service defined in the ccm

[tmcdonald]

Try this one:

sed -i 's/exit.*//' /usr/local/nagiosxi/html/includes/components/graphexplorer/visFunctions.inc.php

[jomann]

Use the above sed replace that Trevor posted for the time being. We are changing the way it does the XSS check for the next bug fix release.

[BanditBBS]

Use the above sed replace that Trevor for the time being. We are changing the way it does the XSS check for the next bug fix release.

Trevor's fix did the trick, all good now!

[tmcdonald]

Well, it was the devs' fix - credit where credit is due :)

Close 'er up?

[BanditBBS]

Yeah, feel free to close it up. I assume with this bug/fix once I check it out on dev for a few days its safe to upgrade prod and apply same fix?