[ACCUMULO-4677] Sanitize @PathParam and @QueryParam parameters in new REST-based monitor

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 2.0.0
• Component/s: monitor
• Labels: pull-request-available
• Assignee: Kyle Van Gilson
• Reporter: Christopher Tubbs
• Created: 06/Jul/17 23:46
• Updated: 05/Dec/17 21:47
• Resolved: 05/Dec/17 17:19

Description

Following on the issue identified in ACCUMULO-4660, I verified that parameters to the REST-based monitor (ACCUMULO-3005) resources need sanitization as well.

All @PathParam and @QueryParam annotated fields should be sanitized.

Issue Links

• relates to: ACCUMULO-3005 Convert the monitor into a real REST server
• relates to: ACCUMULO-4756 New Monitor Validation fails for default tables
• relates to: ACCUMULO-4660 Trace servlet on monitor doesn't sanitize URL data
• links to: GitHub Pull Request #289
• links to: GitHub Pull Request #289