[ https://issues.apache.org/jira/browse/HBASE-15270?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Samir Ahmic updated HBASE-15270: -------------------------------- Attachment: HBASE-15270_v1.patch Here is new patch, trying to encodeForURL if fails it will encodeForHTML. > Use appropriate encoding for "filter" field in TaskMonitorTmpl.jamon > --------------------------------------------------------------------- > > Key: HBASE-15270 > URL: https://issues.apache.org/jira/browse/HBASE-15270 > Project: HBase > Issue Type: Sub-task > Components: UI > Affects Versions: 2.0.0, 1.2.1, 1.1.3 > Reporter: Samir Ahmic > Assignee: Samir Ahmic > Fix For: 2.0.0, 1.2.1, 1.1.3 > > Attachments: HBASE-15270_v0.patch, HBASE-15270_v1.patch > > > In TaskMonitorTmpl.jamon we have this line > {code} > <li><a href="?format=json&filter=<% filter %>">View as JSON</a></li> > {code} > which is allowing "filter" parameter to take arbitrary value. I suggest that > we encode this value for HTML. -- This message was sent by Atlassian JIRA (v6.3.4#6332)