[
https://issues.apache.org/jira/browse/CAMEL-25445?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrea Cosentino updated CAMEL-25445:
-------------------------------------
Fix Version/s: 4.24.0
> camel-jbang-plugin-tui - sanitize 8-bit C1 control characters in displayed
> integration text
> -------------------------------------------------------------------------------------------
>
> Key: CAMEL-25445
> URL: https://issues.apache.org/jira/browse/CAMEL-25445
> Project: Camel
> Issue Type: Improvement
> Components: camel-jbang
> Reporter: Andrea Cosentino
> Priority: Minor
> Fix For: 4.24.0
>
>
> Text shown from monitored integrations (traced messages, error exchanges, log
> lines, span attributes, etc.) is rendered through TamboUI buffers, which
> neutralize 7-bit C0 controls but pass 8-bit C1 controls (U+0080-U+009F)
> through unchanged; in --web mode the browser terminal (xterm.js) acts on
> them. The TUI should sanitize or visibly escape C1 (and BiDi/zero-width)
> characters before placing untrusted text into a span/buffer.
> Note: the pass-through originates in the TamboUI buffer; a sanitizer on the
> Camel side is the mitigation, and the behaviour should also be reported
> upstream to TamboUI.
> Module: dsl/camel-jbang/camel-jbang-plugin-tui.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
