Skip to content

[Obs Onboarding] Fix app crash when parsing invalid syntax from search URL param#269741

Merged
mykolaharmash merged 2 commits into
elastic:mainfrom
mykolaharmash:search-syntax-fix
May 20, 2026
Merged

[Obs Onboarding] Fix app crash when parsing invalid syntax from search URL param#269741
mykolaharmash merged 2 commits into
elastic:mainfrom
mykolaharmash:search-syntax-fix

Conversation

@mykolaharmash
Copy link
Copy Markdown
Contributor

@mykolaharmash mykolaharmash commented May 18, 2026

Closes https://github.com/elastic/observability-error-backlog/issues/808

Adds guard for invalid syntax inside the search URL param. The app doesn't write an invalid search query into the URL when user enters it in the field, but it's still possible to modify the URL directly, which will crash the app when trying to read the parameter.

@mykolaharmash mykolaharmash requested a review from a team as a code owner May 18, 2026 14:28
@mykolaharmash mykolaharmash added release_note:skip Skip the PR/issue when compiling release notes backport:all-open Backport to all branches that could still receive a release labels May 18, 2026
@kibanamachine
Copy link
Copy Markdown
Contributor

💚 Build Succeeded

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
observabilityOnboarding 165.6KB 165.7KB +46.0B

History

Copy link
Copy Markdown
Contributor

@gbamparop gbamparop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@mykolaharmash mykolaharmash merged commit d1f70d8 into elastic:main May 20, 2026
31 checks passed
@kibanamachine
Copy link
Copy Markdown
Contributor

Starting backport for target branches: 8.19, 9.3, 9.4

https://github.com/elastic/kibana/actions/runs/26155089759

@kibanamachine
Copy link
Copy Markdown
Contributor

💔 Some backports could not be created

Status Branch Result
8.19 Backport failed because of merge conflicts

You might need to backport the following PRs to 8.19:
- [scripts/check] exclude Scout tests from jest fast path (#270060)
- mise: add mise (#253596)
- fix stray .d.ts files from type_check in git worktrees (#269960)
9.3
9.4

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

node scripts/backport --pr 269741

Questions ?

Please refer to the Backport tool documentation

kibanamachine added a commit that referenced this pull request May 20, 2026
… search URL param (#269741) (#270124)

# Backport

This will backport the following commits from `main` to `9.4`:
- [[Obs Onboarding] Fix app crash when parsing invalid syntax from
search URL param
(#269741)](#269741)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Mykola
Harmash","email":"mykola.harmash@gmail.com"},"sourceCommit":{"committedDate":"2026-05-20T09:54:06Z","message":"[Obs
Onboarding] Fix app crash when parsing invalid syntax from search URL
param (#269741)\n\nCloses
https://github.com/elastic/observability-error-backlog/issues/808\n\nAdds
guard for invalid syntax inside the `search` URL param. The app\ndoesn't
write an invalid search query into the URL when user enters it\nin the
field, but it's still possible to modify the URL directly, which\nwill
crash the app when trying to read the
parameter.","sha":"d1f70d8e53aacd45015c4239358a18d4388b5f6b","branchLabelMapping":{"^v9.5.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:all-open","v9.5.0"],"title":"[Obs
Onboarding] Fix app crash when parsing invalid syntax from search URL
param","number":269741,"url":"https://github.com/elastic/kibana/pull/269741","mergeCommit":{"message":"[Obs
Onboarding] Fix app crash when parsing invalid syntax from search URL
param (#269741)\n\nCloses
https://github.com/elastic/observability-error-backlog/issues/808\n\nAdds
guard for invalid syntax inside the `search` URL param. The app\ndoesn't
write an invalid search query into the URL when user enters it\nin the
field, but it's still possible to modify the URL directly, which\nwill
crash the app when trying to read the
parameter.","sha":"d1f70d8e53aacd45015c4239358a18d4388b5f6b"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.5.0","branchLabelMappingKey":"^v9.5.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/269741","number":269741,"mergeCommit":{"message":"[Obs
Onboarding] Fix app crash when parsing invalid syntax from search URL
param (#269741)\n\nCloses
https://github.com/elastic/observability-error-backlog/issues/808\n\nAdds
guard for invalid syntax inside the `search` URL param. The app\ndoesn't
write an invalid search query into the URL when user enters it\nin the
field, but it's still possible to modify the URL directly, which\nwill
crash the app when trying to read the
parameter.","sha":"d1f70d8e53aacd45015c4239358a18d4388b5f6b"}}]}]
BACKPORT-->

Co-authored-by: Mykola Harmash <mykola.harmash@gmail.com>
kibanamachine added a commit that referenced this pull request May 20, 2026
… search URL param (#269741) (#270123)

# Backport

This will backport the following commits from `main` to `9.3`:
- [[Obs Onboarding] Fix app crash when parsing invalid syntax from
search URL param
(#269741)](#269741)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Mykola
Harmash","email":"mykola.harmash@gmail.com"},"sourceCommit":{"committedDate":"2026-05-20T09:54:06Z","message":"[Obs
Onboarding] Fix app crash when parsing invalid syntax from search URL
param (#269741)\n\nCloses
https://github.com/elastic/observability-error-backlog/issues/808\n\nAdds
guard for invalid syntax inside the `search` URL param. The app\ndoesn't
write an invalid search query into the URL when user enters it\nin the
field, but it's still possible to modify the URL directly, which\nwill
crash the app when trying to read the
parameter.","sha":"d1f70d8e53aacd45015c4239358a18d4388b5f6b","branchLabelMapping":{"^v9.5.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:all-open","v9.5.0"],"title":"[Obs
Onboarding] Fix app crash when parsing invalid syntax from search URL
param","number":269741,"url":"https://github.com/elastic/kibana/pull/269741","mergeCommit":{"message":"[Obs
Onboarding] Fix app crash when parsing invalid syntax from search URL
param (#269741)\n\nCloses
https://github.com/elastic/observability-error-backlog/issues/808\n\nAdds
guard for invalid syntax inside the `search` URL param. The app\ndoesn't
write an invalid search query into the URL when user enters it\nin the
field, but it's still possible to modify the URL directly, which\nwill
crash the app when trying to read the
parameter.","sha":"d1f70d8e53aacd45015c4239358a18d4388b5f6b"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.5.0","branchLabelMappingKey":"^v9.5.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/269741","number":269741,"mergeCommit":{"message":"[Obs
Onboarding] Fix app crash when parsing invalid syntax from search URL
param (#269741)\n\nCloses
https://github.com/elastic/observability-error-backlog/issues/808\n\nAdds
guard for invalid syntax inside the `search` URL param. The app\ndoesn't
write an invalid search query into the URL when user enters it\nin the
field, but it's still possible to modify the URL directly, which\nwill
crash the app when trying to read the
parameter.","sha":"d1f70d8e53aacd45015c4239358a18d4388b5f6b"}}]}]
BACKPORT-->

Co-authored-by: Mykola Harmash <mykola.harmash@gmail.com>
dennis-tismenko pushed a commit to dennis-tismenko/kibana that referenced this pull request May 20, 2026
…h URL param (elastic#269741)

Closes elastic/observability-error-backlog#808

Adds guard for invalid syntax inside the `search` URL param. The app
doesn't write an invalid search query into the URL when user enters it
in the field, but it's still possible to modify the URL directly, which
will crash the app when trying to read the parameter.
paulinashakirova pushed a commit to paulinashakirova/kibana that referenced this pull request May 22, 2026
…h URL param (elastic#269741)

Closes elastic/observability-error-backlog#808

Adds guard for invalid syntax inside the `search` URL param. The app
doesn't write an invalid search query into the URL when user enters it
in the field, but it's still possible to modify the URL directly, which
will crash the app when trying to read the parameter.
jcger pushed a commit that referenced this pull request May 26, 2026
…h URL param (#269741)

Closes elastic/observability-error-backlog#808

Adds guard for invalid syntax inside the `search` URL param. The app
doesn't write an invalid search query into the URL when user enters it
in the field, but it's still possible to modify the URL directly, which
will crash the app when trying to read the parameter.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:all-open Backport to all branches that could still receive a release release_note:skip Skip the PR/issue when compiling release notes v9.3.5 v9.4.2 v9.5.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants