Samir Ahmic created HBASE-15270:
-----------------------------------
Summary: Use appropriate encoding for "filter" field in
TaskMonitorTmpl.jamon
Key: HBASE-15270
URL: https://issues.apache.org/jira/browse/HBASE-15270
Project: HBase
Issue Type: Sub-task
Affects Versions: 1.1.3, 2.0.0, 1.2.1
Reporter: Samir Ahmic
In TaskMonitorTmpl.jamon we have this line
{code}
<li><a href="?format=json&filter=<% filter %>">View as JSON</a></li>
{code}
which is allowing "filter" parameter to take arbitrary value. I suggest that we
encode this value for HTML.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)