Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-16328 Reimplement web UI fixes without license problems
  3. HBASE-17561

table status page should escape values that may contain arbitrary characters.

    XMLWordPrintableJSON

    Details

    • Type: Sub-task
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.4.0, 1.3.1, 1.2.5, 1.1.10, 2.0.0
    • Component/s: master, UI
    • Labels:
      None

      Description

      We write out table names to an html document without escaping html entities

      e.g. in this case it even comes directly from the request

          <meta charset="utf-8">
          <% if ( !readOnly && action != null ) { %>
              <title>HBase Master: <%= master.getServerName() %></title>
          <% } else { %>
              <title>Table: <%= fqtn %></title>
          <% } %>
      

      in https://github.com/apache/hbase/blob/master/hbase-server/src/main/resources/hbase-webapps/master/table.jsp

        Attachments

        1. HBASE-17561.0.patch
          9 kB
          Sean Busbey

          Activity

            People

            • Assignee:
              busbey Sean Busbey
              Reporter:
              busbey Sean Busbey
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: