Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
2.8.0
-
Reviewed
Description
RM web app UI display <!DOCTYPE html PUBLIC "-\/\/W3C\/\/DTD HTML 4.01\/\/EN" "http:\/\/www.w3.org\/TR\/html4\/strict.dtd"> which is not necessary.
This is because, content of html page is escaped which result browser cant not parse it. Any content which is escaped should be with the HTML block , but doc type is above html which browser can't parse it.
Attachments
Attachments
Issue Links
- relates to
-
YARN-1993 Cross-site scripting vulnerability in TextView.java
- Resolved