[SOLR-1031] XSS vulnerability in schema.jsp (patch included)

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.2, 1.3
• Fix Version/s: 1.4
• Component/s: Admin UI
• Assignee: Unassigned
• Reporter: Paul Lovvik
• Created: 20/Feb/09 23:20
• Updated: 16/Feb/17 15:55
• Resolved: 21/Feb/09 10:46

Description

If javascript is embedded in any of the fields, it is possible for that javascript to be executed when viewing the schema.

The javascript will appear in the "Top Terms" part of the UI.

I have created a simple patch to prevent this problem from occurring.