XSS in the WebUI
----------------
Key: HBASE-3546
URL: https://issues.apache.org/jira/browse/HBASE-3546
Project: HBase
Issue Type: Bug
Reporter: Takuya Ueshin
Priority: Minor
There are possibilities of XSS in the XSS.
If ColumnFamily or Region splitting keys are like
Bytes.toBytes("<script>alert('js')</script>")
then browsers run the JavaScript code.
I tested on HBase-0.90.0 .
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
