[
https://issues.apache.org/jira/browse/SOLR-6098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14271007#comment-14271007
]
ASF subversion and git services commented on SOLR-6098:
-------------------------------------------------------
Commit 1650525 from [~ehatcher] in branch 'dev/trunk'
[ https://svn.apache.org/r1650525 ]
SOLR-6098: fix a couple of post.jar mentions that did not have -Dc on them
> SOLR console displaying JSON does not escape text properly
> ----------------------------------------------------------
>
> Key: SOLR-6098
> URL: https://issues.apache.org/jira/browse/SOLR-6098
> Project: Solr
> Issue Type: Bug
> Components: web gui
> Affects Versions: 4.4
> Reporter: Kingston Duffie
> Assignee: Stefan Matheis (steffkes)
> Priority: Minor
> Fix For: 4.5
>
>
> In the SOLR admin web console, when displaying JSON response for Query, the
> text is not being HTML escaped, so any text that happens to match HTML markup
> is being processed as HTML.
> For example, enter "<strike>hello</strike>" in the "q" textbox and the
> responseHeader will contain:
> "q": "body:hello" where the "hello" portion is shown using strikeout.
> This seems benign, but can be extremely confusing when viewing results,
> because if your fields happen to contain, for example, <[email protected]>, this
> will be completely missing (because the browser treats this as an invalid
> tag).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
