Eric Yang created CHUKWA-799:
--------------------------------

             Summary: Upgrade jsoup version
                 Key: CHUKWA-799
                 URL: https://issues.apache.org/jira/browse/CHUKWA-799
             Project: Chukwa
          Issue Type: Bug
            Reporter: Eric Yang


Jsoup versions before 1.8.3 do not properly handle HTML tags missing
the closing ">" when parsing near the end of the file. This exposes a
potential XSS vector.

This request is to upgrade to Jsoup 1.8.3 or newer.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to