[SOLR-1579] CLONE -stats.jsp XML escaping

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4
• Fix Version/s: 1.4.1, 1.5, 3.1, 4.0-ALPHA
• Component/s: Admin UI
• Assignee: Chris M. Hostetter
• Reporter: David Bowen
• Created: 20/Nov/09 03:41
• Updated: 16/Feb/17 15:55
• Resolved: 13/Feb/10 03:33

Description

The fix to SOLR-1008 was wrong. It used chardata escaping for a value that is an attribute value.

I.e. instead of XML.escapeCharData it should call XML.escapeAttributeValue.

Otherwise, any query used as a key in the filter cache whose printed representation contains a double-quote character causes invalid XML to be generated.

Issue Links

• is a clone of: SOLR-1008 stats.jsp XML escaping