[
https://issues.apache.org/jira/browse/HBASE-3546?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrew Kyle Purtell closed HBASE-3546.
--------------------------------------
Assignee: (was: Liang Xie)
> XSS in the WebUI
> ----------------
>
> Key: HBASE-3546
> URL: https://issues.apache.org/jira/browse/HBASE-3546
> Project: HBase
> Issue Type: Bug
> Reporter: Takuya Ueshin
> Priority: Minor
>
> There are possibilities of XSS in the WebUI.
> If ColumnFamily or Region splitting keys are like
> Bytes.toBytes("<script>alert('js')</script>")
> then browsers run the JavaScript code.
> I tested on HBase-0.90.0 .
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
