[ https://issues.apache.org/jira/browse/HBASE-15270?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15151787#comment-15151787 ]
Heng Chen commented on HBASE-15270: ----------------------------------- Oh! Thanks [~busbey], my fault, i did not check it carefully. > Use appropriate encoding for "filter" field in TaskMonitorTmpl.jamon > --------------------------------------------------------------------- > > Key: HBASE-15270 > URL: https://issues.apache.org/jira/browse/HBASE-15270 > Project: HBase > Issue Type: Sub-task > Components: UI > Affects Versions: 2.0.0, 1.2.1, 1.1.3 > Reporter: Samir Ahmic > Assignee: Samir Ahmic > Fix For: 2.0.0, 1.2.0, 1.3.0, 1.1.4 > > Attachments: HBASE-15270_v0.patch, HBASE-15270_v1.patch > > > In TaskMonitorTmpl.jamon we have this line > {code} > <li><a href="?format=json&filter=<% filter %>">View as JSON</a></li> > {code} > which is allowing "filter" parameter to take arbitrary value. I suggest that > we encode this value for HTML. -- This message was sent by Atlassian JIRA (v6.3.4#6332)