[
https://issues.apache.org/jira/browse/HBASE-3546?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
stack resolved HBASE-3546.
--------------------------
Resolution: Won't Fix
Assignee: liang xie
Closing since a 0.90 minor bug (0.90 is old stuff). Assigning Liang since he
did the investigation.
> XSS in the WebUI
> ----------------
>
> Key: HBASE-3546
> URL: https://issues.apache.org/jira/browse/HBASE-3546
> Project: HBase
> Issue Type: Bug
> Reporter: Takuya Ueshin
> Assignee: liang xie
> Priority: Minor
>
> There are possibilities of XSS in the WebUI.
> If ColumnFamily or Region splitting keys are like
> Bytes.toBytes("<script>alert('js')</script>")
> then browsers run the JavaScript code.
> I tested on HBase-0.90.0 .
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
