Thank you for the quick response. I have created a pull request. https://github.com/apache/incubator-usergrid/pull/300
Arun -----Original Message----- From: Rod Simpson [mailto:r...@rodsimpson.com] Sent: Tuesday, July 07, 2015 10:49 AM To: dev@usergrid.incubator.apache.org Subject: Re: Usergrid REST API issue You are in the right place. Here is the website: http://usergrid.incubator.apache.org/ Here is the github repo: https://github.com/apache/incubator-usergrid Just send a PR and the team will be happy to review it. Rod -- Rod Simpson On July 7, 2015 at 7:57:06 AM, Arun Ram (arun....@spartasystems.com) wrote: Hi, My name is Arun Ram and work for Sparta systems. We have discovered a potential security issue with the usergrid REST API where a script could be injected into the response. I would like to propose and implement a fix. Please let me know what is the appropriate forum to discuss my fix and find out the procedure to commit to the code base. Thanks. Arun ________________________________ NOTICE: This e-mail message and any attachments may contain confidential, proprietary, and/or privileged information which should be treated accordingly. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this message, and destroy all physical and electronic copies. Thank you. ________________________________ NOTICE: This e-mail message and any attachments may contain confidential, proprietary, and/or privileged information which should be treated accordingly. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this message, and destroy all physical and electronic copies. Thank you.
