[ https://issues.apache.org/jira/browse/HBASE-15270?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15151879#comment-15151879 ]
Hudson commented on HBASE-15270: -------------------------------- SUCCESS: Integrated in HBase-1.2-IT #441 (See [https://builds.apache.org/job/HBase-1.2-IT/441/]) HBASE-15270 Use appropriate encoding for "filter" field in (busbey: rev bbb4e60dae7269fd117f9897949f8dbc1d184b51) * hbase-server/src/main/jamon/org/apache/hadoop/hbase/tmpl/common/TaskMonitorTmpl.jamon > Use appropriate encoding for "filter" field in TaskMonitorTmpl.jamon > --------------------------------------------------------------------- > > Key: HBASE-15270 > URL: https://issues.apache.org/jira/browse/HBASE-15270 > Project: HBase > Issue Type: Sub-task > Components: UI > Affects Versions: 2.0.0, 1.2.1, 1.1.3 > Reporter: Samir Ahmic > Assignee: Samir Ahmic > Fix For: 2.0.0, 1.2.0, 1.3.0, 1.1.4 > > Attachments: HBASE-15270_v0.patch, HBASE-15270_v1.patch > > > In TaskMonitorTmpl.jamon we have this line > {code} > <li><a href="?format=json&filter=<% filter %>">View as JSON</a></li> > {code} > which is allowing "filter" parameter to take arbitrary value. I suggest that > we encode this value for HTML. -- This message was sent by Atlassian JIRA (v6.3.4#6332)