November Happy Hour will be moved to Thursday December 5th.

[FilterDefinition] Can create a new profile filter definition with invalid property in Query

Found in

EPiServer.Profiles.Client 1.14.0

Fixed in

EPiServer.Profiles.Client 1.24.0

(Or a related package)

Created

Mar 13, 2020

Updated

Mar 05, 2021

State

Closed, Fixed and tested


Description

Create a new profile filter definition with an invalid property (which does not belong to the profile) in Query like this one:

POST: /api/v2.0/FilterDefinitions
{
    "Name": "Testing_VisitorGroup_input_value",
    "Description": "VisitorGroup with inputValue",
    "Query": "Testing eq {{value}}",
    "Parameters": {
        "value": "string"
    },
    "Category": "Profiles",
    "Type": "Profiles"
}

Expected result:

Returns 400 Bad Request with message Invalid filter definition.

Actual result:

Returns 201 Created and create new filter definition successfully.

The same thing happens if you create an event filter definition with an invalid property which does not belong to the track event.