Harri created AIRFLOW-4110:
------------------------------
Summary: XSS issue with Search in Webserver
Key: AIRFLOW-4110
URL: https://issues.apache.org/jira/browse/AIRFLOW-4110
Project: Apache Airflow
Issue Type: Bug
Components: webserver
Affects Versions: 1.10.2
Reporter: Harri
There is an XSS issue with Search in Webserver. One can inject javascript to
search functionality.
E.g. one can get javascript alert window injected:
GET /dagger/admin/?search=hupqd%22%3e%3cscript%3ealert(1)%3c%2fscript%3eel10r
HTTP/1.1
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
