Alejandro Fernandez created AIRFLOW-2210:
--------------------------------------------
Summary: Rendering logs executes javascript code, which is
dangerous and must be HTML-escaped
Key: AIRFLOW-2210
URL: https://issues.apache.org/jira/browse/AIRFLOW-2210
Project: Apache Airflow
Issue Type: Bug
Components: ui
Affects Versions: 1.8.0
Reporter: Alejandro Fernandez
Assignee: Alejandro Fernandez
Rendering DAGs whose log message contains javascript will be executed on the
browser.This is happening because the Airflow UI is not HTML escaping the log
message.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
