JSPs don't HTML escape literals (ie: table names, region names, start & end 
keys)
---------------------------------------------------------------------------------

                 Key: HBASE-1299
                 URL: https://issues.apache.org/jira/browse/HBASE-1299
             Project: Hadoop HBase
          Issue Type: Bug
    Affects Versions: 0.19.1, 0.19.0
            Reporter: Hoss Man


similar to HBASE-1298, the various JSPs included with HBase for monitoring the 
system don't seem to do any HTML escaping when displaying user entered data 
which may contain special characters: table names, region names, start Keys, or 
end Keys

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to