[KUDU-1898] /varz page doesn't HTML-escape flag values

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Fix Version/s: 1.3.0
• Component/s: util
• Target Version/s: 1.3.0
• Code Review: https://gerrit.cloudera.org/#/c/6173/
• Assignee: Hao Hao
• Reporter: Todd Lipcon
• Created: 26/Feb/17 21:42
• Updated: 01/Mar/17 23:41
• Resolved: 01/Mar/17 23:41

Description

I was just trying the new "flag redaction" feature and noticed that the string '<redacted>' isn't getting properly HTML-escaped in the /varz web page. It appears we've never properly escaped flag values in this context, but it's only obvious now that the '<redacted>' string is getting interpreted as an HTML tag.