[ 
https://issues.apache.org/jira/browse/OOZIE-3101?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16240990#comment-16240990
 ] 

Rohini Palaniswamy commented on OOZIE-3101:
-------------------------------------------

1) Do we need all three escaping - xml, javascript and html to get rid of the 
findbugs XSS vulnerability warning? OOZIE-3109 only does html escaping. If it 
is better to do all three, then we should do that in OOZIE-3109 as well.
2) The new constants should be in JsonTags instead of RestConstants and camel 
casing should be used. RestConstants is only used for query params.

> Oozie should add error message to the response body
> ---------------------------------------------------
>
>                 Key: OOZIE-3101
>                 URL: https://issues.apache.org/jira/browse/OOZIE-3101
>             Project: Oozie
>          Issue Type: Bug
>            Reporter: Satish Subhashrao Saley
>            Assignee: Satish Subhashrao Saley
>         Attachments: OOZIE-3101-1.patch, OOZIE-3101-2.patch, 
> OOZIE-3101-3.patch
>
>
> For web service APIs, currently Oozie adds error message in a custom response 
> header which is parsed out by the OozieClient. Oozie should also put error 
> message in the response body so that clients like curl can display the error 
> message to users without having to turn on verbose output



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to