[HBASE-16328] Reimplement web UI fixes without license problems

• Type: Improvement
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Affects Version/s: 1.3.0, 1.4.0, 1.1.6, 1.2.3, 2.0.0
• Component/s: dependencies, security, UI
• Assignee: Unassigned
• Reporter: Sean Busbey
• Created: 02/Aug/16 14:47
• Updated: 22/Jan/20 06:15

Description

After HBASE-16317 we're missing some good improvements in our web ui.

This jira is to track re-implementing the reverted commits after either

1. getting the ESAPI project to stop using cat-x dependencies
2. reimplementing the functionality without the ESAPI project

For review, the category-x list is here:

https://www.apache.org/legal/resolved#category-x

Issue Links

• blocks: HBASE-16298 ESAPI.properties missing in hbase-server.jar
• contains: HBASE-15270 Use appropriate encoding for "filter" field in TaskMonitorTmpl.jamon
• contains: HBASE-15369 Handle NPE in region.jsp
• contains: HBASE-15122 Servlets generate XSS_REQUEST_PARAMETER_TO_SERVLET_WRITER findbugs warnings
• contains: HBASE-15329 Cross-Site Scripting: Reflected in table.jsp
• is broken by: HBASE-16260 Audit dependencies for Category-X

Sub-Tasks

• Re-fix XSS request issue in JMXJsonServlet: Closed
• table status page should escape values that may contain arbitrary characters.: Resolved