[ https://issues.apache.org/jira/browse/HBASE-15270?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15152203#comment-15152203 ]
Hudson commented on HBASE-15270: -------------------------------- FAILURE: Integrated in HBase-Trunk_matrix #718 (See [https://builds.apache.org/job/HBase-Trunk_matrix/718/]) HBASE-15270 Use appropriate encoding for "filter" field in (busbey: rev bba4f107c19b92eb51c7772eddb408397bea3002) * hbase-server/src/main/jamon/org/apache/hadoop/hbase/tmpl/common/TaskMonitorTmpl.jamon > Use appropriate encoding for "filter" field in TaskMonitorTmpl.jamon > --------------------------------------------------------------------- > > Key: HBASE-15270 > URL: https://issues.apache.org/jira/browse/HBASE-15270 > Project: HBase > Issue Type: Sub-task > Components: UI > Affects Versions: 2.0.0, 1.2.1, 1.1.3 > Reporter: Samir Ahmic > Assignee: Samir Ahmic > Fix For: 2.0.0, 1.2.0, 1.3.0, 1.1.4 > > Attachments: HBASE-15270_v0.patch, HBASE-15270_v1.patch > > > In TaskMonitorTmpl.jamon we have this line > {code} > <li><a href="?format=json&filter=<% filter %>">View as JSON</a></li> > {code} > which is allowing "filter" parameter to take arbitrary value. I suggest that > we encode this value for HTML. -- This message was sent by Atlassian JIRA (v6.3.4#6332)