Ivan Ravin created CAMEL-23367:
----------------------------------

             Summary: org.apache.camel.management.mbean.ManagedCamelContext 
generates illegal XML
                 Key: CAMEL-23367
                 URL: https://issues.apache.org/jira/browse/CAMEL-23367
             Project: Camel
          Issue Type: Bug
          Components: camel-management
    Affects Versions: 4.10.7
            Reporter: Ivan Ravin


org.apache.camel.management.mbean.ManagedCamelContext in method 
dumpRoutesStatsAsXml uses StringBuilder to generate xml, without character 
escaping. But routeId, processorId can contain characters forbidden in XML 
attributes, like <, >, &, etc. So, method dumpRoutesStatsAsXml can generates 
unparseable xml.

I think this method, and maybe other dump... methods require character escaping.

Found in camel-4.10.7, but main branch is the same: 
https://github.com/apache/camel/blob/main/core/camel-management/src/main/java/org/apache/camel/management/mbean/ManagedCamelContext.java



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to