[
https://issues.apache.org/jira/browse/HBASE-17561?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15872301#comment-15872301
]
Esteban Gutierrez commented on HBASE-17561:
-------------------------------------------
+1
> table status page should escape values that may contain arbitrary characters.
> -----------------------------------------------------------------------------
>
> Key: HBASE-17561
> URL: https://issues.apache.org/jira/browse/HBASE-17561
> Project: HBase
> Issue Type: Sub-task
> Components: master, UI
> Reporter: Sean Busbey
> Assignee: Sean Busbey
> Attachments: HBASE-17561.0.patch
>
>
> We write out table names to an html document without escaping html entities
> e.g. in this case it even comes directly from the request
> {code}
> <meta charset="utf-8">
> <% if ( !readOnly && action != null ) { %>
> <title>HBase Master: <%= master.getServerName() %></title>
> <% } else { %>
> <title>Table: <%= fqtn %></title>
> <% } %>
> {code}
> in
> https://github.com/apache/hbase/blob/master/hbase-server/src/main/resources/hbase-webapps/master/table.jsp
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
