[ 
https://issues.apache.org/jira/browse/HDFS-4100?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13498307#comment-13498307
 ] 

Eli Collins commented on HDFS-4100:
-----------------------------------

Thanks for the findbugs output Liang. How did you generate it?  I'm using 
findbugs 2.0.1 as well (updated hadoop-project/pom.xml) then run {{mvn compile 
findbugs:findbugs}} and then {{$FINDBUGS_HOME/bin/convertXmlToText -html 
hadoop-hdfs-project/hadoop-hdfs/target/findbugsXml.xml findbugs.html}} to 
generate the report but I don't see the security section you have.

+1 to your patch, addresses the three warnings in the output you posted.
                
> Fix all findbug security warings
> --------------------------------
>
>                 Key: HDFS-4100
>                 URL: https://issues.apache.org/jira/browse/HDFS-4100
>             Project: Hadoop HDFS
>          Issue Type: Sub-task
>          Components: data-node, journal-node, security
>    Affects Versions: 1.1.0, 0.23.4, 3.0.0, 2.0.2-alpha
>            Reporter: liang xie
>            Assignee: liang xie
>         Attachments: HDFS-4100-findbugs.xml, HDFS-4100.patch
>
>
> There're potential XSS risk due to lack of HTML excape

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to