[ https://issues.apache.org/jira/browse/HDFS-4100?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13498307#comment-13498307 ]
Eli Collins commented on HDFS-4100: ----------------------------------- Thanks for the findbugs output Liang. How did you generate it? I'm using findbugs 2.0.1 as well (updated hadoop-project/pom.xml) then run {{mvn compile findbugs:findbugs}} and then {{$FINDBUGS_HOME/bin/convertXmlToText -html hadoop-hdfs-project/hadoop-hdfs/target/findbugsXml.xml findbugs.html}} to generate the report but I don't see the security section you have. +1 to your patch, addresses the three warnings in the output you posted. > Fix all findbug security warings > -------------------------------- > > Key: HDFS-4100 > URL: https://issues.apache.org/jira/browse/HDFS-4100 > Project: Hadoop HDFS > Issue Type: Sub-task > Components: data-node, journal-node, security > Affects Versions: 1.1.0, 0.23.4, 3.0.0, 2.0.2-alpha > Reporter: liang xie > Assignee: liang xie > Attachments: HDFS-4100-findbugs.xml, HDFS-4100.patch > > > There're potential XSS risk due to lack of HTML excape -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira