[
https://issues.apache.org/jira/browse/SOLR-6098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Stefan Matheis (steffkes) resolved SOLR-6098.
---------------------------------------------
Resolution: Duplicate
Fix Version/s: 4.5
Assignee: Stefan Matheis (steffkes)
> SOLR console displaying JSON does not escape text properly
> ----------------------------------------------------------
>
> Key: SOLR-6098
> URL: https://issues.apache.org/jira/browse/SOLR-6098
> Project: Solr
> Issue Type: Bug
> Components: web gui
> Affects Versions: 4.4
> Reporter: Kingston Duffie
> Assignee: Stefan Matheis (steffkes)
> Priority: Minor
> Fix For: 4.5
>
>
> In the SOLR admin web console, when displaying JSON response for Query, the
> text is not being HTML escaped, so any text that happens to match HTML markup
> is being processed as HTML.
> For example, enter "<strike>hello</strike>" in the "q" textbox and the
> responseHeader will contain:
> "q": "body:hello" where the "hello" portion is shown using strikeout.
> This seems benign, but can be extremely confusing when viewing results,
> because if your fields happen to contain, for example, <f...@bar.com>, this
> will be completely missing (because the browser treats this as an invalid
> tag).
--
This message was sent by Atlassian JIRA
(v6.2#6252)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org
