Andrea Cosentino created CAMEL-25445:
----------------------------------------
Summary: camel-jbang-plugin-tui - sanitize 8-bit C1 control
characters in displayed integration text
Key: CAMEL-25445
URL: https://issues.apache.org/jira/browse/CAMEL-25445
Project: Camel
Issue Type: Improvement
Components: camel-jbang
Reporter: Andrea Cosentino
Text shown from monitored integrations (traced messages, error exchanges, log
lines, span attributes, etc.) is rendered through TamboUI buffers, which
neutralize 7-bit C0 controls but pass 8-bit C1 controls (U+0080-U+009F) through
unchanged; in --web mode the browser terminal (xterm.js) acts on them. The TUI
should sanitize or visibly escape C1 (and BiDi/zero-width) characters before
placing untrusted text into a span/buffer.
Note: the pass-through originates in the TamboUI buffer; a sanitizer on the
Camel side is the mitigation, and the behaviour should also be reported
upstream to TamboUI.
Module: dsl/camel-jbang/camel-jbang-plugin-tui.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
