[ 
https://issues.apache.org/jira/browse/HBASE-1299?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12918267#action_12918267
 ] 

ryan rawson commented on HBASE-1299:
------------------------------------

with the binary escaping this issue is much abated, since by default we only 
get 0-9A-Za-z and a few others (eg: -_ etc).



> JSPs don't HTML escape literals (ie: table names, region names, start & end 
> keys)
> ---------------------------------------------------------------------------------
>
>                 Key: HBASE-1299
>                 URL: https://issues.apache.org/jira/browse/HBASE-1299
>             Project: HBase
>          Issue Type: Bug
>    Affects Versions: 0.19.0, 0.19.1
>            Reporter: Hoss Man
>             Fix For: 0.90.0
>
>
> similar to HBASE-1298, the various JSPs included with HBase for monitoring 
> the system don't seem to do any HTML escaping when displaying user entered 
> data which may contain special characters: table names, region names, start 
> Keys, or end Keys

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to