[ https://issues.apache.org/jira/browse/OOZIE-3101?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16240990#comment-16240990 ]
Rohini Palaniswamy commented on OOZIE-3101: ------------------------------------------- 1) Do we need all three escaping - xml, javascript and html to get rid of the findbugs XSS vulnerability warning? OOZIE-3109 only does html escaping. If it is better to do all three, then we should do that in OOZIE-3109 as well. 2) The new constants should be in JsonTags instead of RestConstants and camel casing should be used. RestConstants is only used for query params. > Oozie should add error message to the response body > --------------------------------------------------- > > Key: OOZIE-3101 > URL: https://issues.apache.org/jira/browse/OOZIE-3101 > Project: Oozie > Issue Type: Bug > Reporter: Satish Subhashrao Saley > Assignee: Satish Subhashrao Saley > Attachments: OOZIE-3101-1.patch, OOZIE-3101-2.patch, > OOZIE-3101-3.patch > > > For web service APIs, currently Oozie adds error message in a custom response > header which is parsed out by the OozieClient. Oozie should also put error > message in the response body so that clients like curl can display the error > message to users without having to turn on verbose output -- This message was sent by Atlassian JIRA (v6.4.14#64029)