[
https://issues.apache.org/jira/browse/CAMEL-23367?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18076544#comment-18076544
]
Claus Ibsen commented on CAMEL-23367:
-------------------------------------
yes the xml-io XMLWriter has methods for escaping that this mbean can copy and
use as well.
> org.apache.camel.management.mbean.ManagedCamelContext generates illegal XML
> ---------------------------------------------------------------------------
>
> Key: CAMEL-23367
> URL: https://issues.apache.org/jira/browse/CAMEL-23367
> Project: Camel
> Issue Type: Improvement
> Components: camel-management
> Affects Versions: 4.10.7
> Reporter: Ivan Ravin
> Priority: Minor
>
> org.apache.camel.management.mbean.ManagedCamelContext in method
> dumpRoutesStatsAsXml uses StringBuilder to generate xml, without character
> escaping. But routeId, processorId can contain characters forbidden in XML
> attributes, like <, >, &, etc. So, method dumpRoutesStatsAsXml can generate
> unparseable xml.
> I think this method, and maybe other dump... methods requires character
> escaping.
> Found in camel-4.10.7, but main branch is the same:
> [https://github.com/apache/camel/blob/main/core/camel-management/src/main/java/org/apache/camel/management/mbean/ManagedCamelContext.java]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
