Details
Description
In TaskMonitorTmpl.jamon we have this line
<li><a href="?format=json&filter=<% filter %>">View as JSON</a></li>
which is allowing "filter" parameter to take arbitrary value. I suggest that we encode this value for HTML.
Attachments
Attachments
Issue Links
- breaks
-
HBASE-16260 Audit dependencies for Category-X
- Resolved
- Is contained by
-
HBASE-16328 Reimplement web UI fixes without license problems
- Open