[mapguide][MG200][New] No error checking with map view parameters

[Walt Welton-Lair]

You can view the artifact detail at the following URL:

    https://mapguide.osgeo.org/servlets/Scarab/id/MG200

Type
 Defect

Artifact ID
 MG200 (No error checking with map view parameters)

Reported by
 Walt Welton-Lair
 waltweltonlair (walt.welton-lair at autodesk.com)

New artifact details:
---------------------------------------------------------

- Version set to new value
  1.0.0
- Priority set to new value
  P3
- Defect Severity set to new value
  Medium
- Description set to new value
  There are currently very few validation checks against map view parameters (map scale, display width/height/dpi).

It's possible to enter invalid values for some of these parameters, and this can potentially bring the server down.

- Steps to Reproduce set to new value
  Enter the following MapGuide request into a browser:

http://localhost/mapguide/mapagent/mapagent.fcgi?OPERATION=GETMAPIMAGE&VERSION=1.0.0&LOCALE=en&MAPDEFINITION=Library%3A%2F%2FSamples%2FSheboygan%2FMaps%2FSheboygan.MapDefinition&FORMAT=image/png&SETVIEWCENTERX=-87.73&SETVIEWCENTERY=43.74&SETVIEWSCALE=8000.0&SETDISPLAYDPI=0&SETDISPLAYWIDTH=400&SETDISPLAYHEIGHT=400

The server will crash.

- Target milestone set to new value
  1.0.1
- Summary set to new value
  No error checking with map view parameters
- Artifact Status set to new value
  New
- Operating system set to new value
  All
- Artifact created
- Component set to new value
  All
- Platform set to new value
  All

---------------------------------------------------------
This message was automatically generated by Project Tracker.