[AMBARI-25439] XSS vulnerability for repo check hint

• Type: Task
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.7.5
• Fix Version/s: 2.8.0, 2.7.5
• Component/s: ambari-web
• Labels: pull-request-available
• Assignee: Antonenko Alexander
• Reporter: Antonenko Alexander
• Created: 03/Dec/19 11:27
• Updated: 17/Nov/22 08:29
• Resolved: 17/Nov/22 08:29

Description

For now UI parses repo error hint as html. It is potential XSS vulnerability.

Issue Links

• links to: GitHub PR#3514
• links to: GitHub Pull Request #3147