[
https://issues.apache.org/jira/browse/YARN-3589?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14532323#comment-14532323
]
Rohith commented on YARN-3589:
------------------------------
YARN-1993 escapes the content which are written with in the html block which is
required for cross-site scripting. But the same logic is being used for content
outside the html block which browser does not parse it and dispaly as it is.
> RM and AH web UI display DOCTYPE
> --------------------------------
>
> Key: YARN-3589
> URL: https://issues.apache.org/jira/browse/YARN-3589
> Project: Hadoop YARN
> Issue Type: Bug
> Components: webapp
> Affects Versions: 2.8.0
> Reporter: Rohith
> Assignee: Rohith
> Attachments: YARN-3589.PNG
>
>
> RM web app UI display {{<!DOCTYPE html PUBLIC "-\/\/W3C\/\/DTD HTML
> 4.01\/\/EN" "http:\/\/www.w3.org\/TR\/html4\/strict.dtd">}} which is not
> necessary.
> This is because, content of html page is escaped which result browser cant
> not parse it. Any content which is escaped should be with the HTML block ,
> but doc type is above html which browser can't parse it.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
