JSPs don't HTML escape literals (ie: table names, region names, start & end
keys)
---------------------------------------------------------------------------------
Key: HBASE-1299
URL: https://issues.apache.org/jira/browse/HBASE-1299
Project: Hadoop HBase
Issue Type: Bug
Affects Versions: 0.19.1, 0.19.0
Reporter: Hoss Man
similar to HBASE-1298, the various JSPs included with HBase for monitoring the
system don't seem to do any HTML escaping when displaying user entered data
which may contain special characters: table names, region names, start Keys, or
end Keys
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.