[
https://issues.apache.org/jira/browse/OOZIE-3101?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16240990#comment-16240990
]
Rohini Palaniswamy commented on OOZIE-3101:
-------------------------------------------
1) Do we need all three escaping - xml, javascript and html to get rid of the
findbugs XSS vulnerability warning? OOZIE-3109 only does html escaping. If it
is better to do all three, then we should do that in OOZIE-3109 as well.
2) The new constants should be in JsonTags instead of RestConstants and camel
casing should be used. RestConstants is only used for query params.
> Oozie should add error message to the response body
> ---------------------------------------------------
>
> Key: OOZIE-3101
> URL: https://issues.apache.org/jira/browse/OOZIE-3101
> Project: Oozie
> Issue Type: Bug
> Reporter: Satish Subhashrao Saley
> Assignee: Satish Subhashrao Saley
> Attachments: OOZIE-3101-1.patch, OOZIE-3101-2.patch,
> OOZIE-3101-3.patch
>
>
> For web service APIs, currently Oozie adds error message in a custom response
> header which is parsed out by the OozieClient. Oozie should also put error
> message in the response body so that clients like curl can display the error
> message to users without having to turn on verbose output
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)