Software name input field accepts overly long names without max length validation #81

Closed
opened 2025-09-22 02:00:55 -04:00 by swap12875d · 3 comments

Description:

On the Account Settings > Tools page, when selecting 'Software' details to update, entering a long software name (with or without spaces) is accepted without any validation or error. The input field should restrict the name to a maximum character length and prompt or prevent excess input accordingly.

Current URL:

https://account-settings.topcoder.com/#tools

Steps to reproduce:

  1. Login and navigate to Account Settings.
  2. Go to the Tools section.
  3. Select the 'Software' details to update.
  4. Enter a very long software name in the input field (try with and without spaces).
  5. Observe that the input field accepts the entire long string without any validation or character limit enforcement.

Actual results:

  • The software name input field accepts arbitrarily long names.
  • No error message or validation prompt is shown to restrict the input length.
  • Users can enter names exceeding the expected maximum character limit.

Expected results:

  • The software name input field should limit the input length to a predefined maximum character count.
  • Upon reaching the limit, the user should be prevented from typing further or should see an error/warning message.
  • The system should validate the input before acceptance to ensure data integrity.

Screenshots/Videos:

image.png

OS and Browser version:

Windows 11, Chrome 140.0.7339.186

VersionDetails:

Windows_chrome_version_screenshot

Device:

Windows Laptop

Reproducibility:

5/5

#### Description: On the Account Settings > Tools page, when selecting 'Software' details to update, entering a long software name (with or without spaces) is accepted without any validation or error. The input field should restrict the name to a maximum character length and prompt or prevent excess input accordingly. #### Current URL: https://account-settings.topcoder.com/#tools #### Steps to reproduce: 1. Login and navigate to Account Settings. 2. Go to the Tools section. 3. Select the 'Software' details to update. 4. Enter a very long software name in the input field (try with and without spaces). 5. Observe that the input field accepts the entire long string without any validation or character limit enforcement. #### Actual results: - The software name input field accepts arbitrarily long names. - No error message or validation prompt is shown to restrict the input length. - Users can enter names exceeding the expected maximum character limit. #### Expected results: - The software name input field should limit the input length to a predefined maximum character count. - Upon reaching the limit, the user should be prevented from typing further or should see an error/warning message. - The system should validate the input before acceptance to ensure data integrity. #### Screenshots/Videos: ![image.png](/attachments/1997a99d-b06a-4a88-969a-7049e46b79a1) #### OS and Browser version: Windows 11, Chrome 140.0.7339.186 VersionDetails: <img src='/attachments/1f354afb-af2d-44dc-8c03-73de2f71fa79' width='600' height='375' alt='Windows_chrome_version_screenshot'> #### Device: Windows Laptop #### Reproducibility: 5/5
1.1 MiB
swap12875d added the FunctionalWindowsChrome labels 2025-09-22 02:00:55 -04:00
Collaborator

Unlikely values: Tests involving extreme or unlikely values, such as entering gibberish or an exceptionally long string into a text field, are considered out of scope unless they introduce security vulnerabilities or cause a server crash.

Unlikely values: Tests involving extreme or unlikely values, such as entering gibberish or an exceptionally long string into a text field, are considered out of scope unless they introduce security vulnerabilities or cause a server crash.
nithya160925 added the Out of Scope label 2025-09-24 00:47:37 -04:00
Author

@nithya160925 , With due respect, while this may seem like an “unlikely value” case, lack of field validation can lead to DB-side risks such as truncation, data inconsistency, or even performance issues. Hence, this is not merely cosmetic but a prime concern for both data integrity and user trust.

@nithya160925 , With due respect, while this may seem like an “unlikely value” case, lack of field validation can lead to DB-side risks such as truncation, data inconsistency, or even performance issues. Hence, this is not merely cosmetic but a prime concern for both data integrity and user trust.
Collaborator

We have clearly stated in the Challenge Details page that testing with an exceptionally long string is not in scope for this bug hunt.

We have clearly stated in the Challenge Details page that testing with an exceptionally long string is not in scope for this bug hunt.
Sign in to join this conversation.
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Topcoder-Platform/public-website-qa-bug-hunt#81