On 02/20/2012 05:04 PM, Dan Kenigsberg wrote:
On Mon, Feb 20, 2012 at 03:53:00PM +0800, Mark Wu wrote:
Hi All,

I have a question about  _filterXmlChars.  If only printable ascii
characters appear in the message reported by ovirt-guest-agent,
then we needn't call _filterXmlChars() because the unicode shouldn't
contain the restricted xml chars.  Am I right ?
We cannot trust the guest agent. The guest may be administered by evil
Eve, trying to cause Vdsm DoS by reporting application names with
illegal characters.

Got it,  thanks!

_______________________________________________
vdsm-devel mailing list
vdsm-devel@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/vdsm-devel

Reply via email to