On Mon, Feb 20, 2012 at 03:53:00PM +0800, Mark Wu wrote: > Hi All, > > I have a question about _filterXmlChars. If only printable ascii > characters appear in the message reported by ovirt-guest-agent, > then we needn't call _filterXmlChars() because the unicode shouldn't > contain the restricted xml chars. Am I right ?
We cannot trust the guest agent. The guest may be administered by evil Eve, trying to cause Vdsm DoS by reporting application names with illegal characters. _______________________________________________ vdsm-devel mailing list vdsm-devel@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/vdsm-devel
