[ https://issues.apache.org/jira/browse/HBASE-1299?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13508990#comment-13508990 ]
Nick Dimiduk commented on HBASE-1299: ------------------------------------- Fails 0.94 because these files moved on trunk. `git checkout 0.94 && cd src/main/resources/hbase-webapps/master && patch` < 1299.patch may work. > JSPs don't HTML escape literals (ie: table names, region names, start & end > keys) > --------------------------------------------------------------------------------- > > Key: HBASE-1299 > URL: https://issues.apache.org/jira/browse/HBASE-1299 > Project: HBase > Issue Type: Bug > Affects Versions: 0.19.0, 0.19.1 > Reporter: Hoss Man > Assignee: Nick Dimiduk > Fix For: 0.96.0 > > Attachments: 1299.patch > > > similar to HBASE-1298, the various JSPs included with HBase for monitoring > the system don't seem to do any HTML escaping when displaying user entered > data which may contain special characters: table names, region names, start > Keys, or end Keys -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira