You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@spark.apache.org by "Dongjoon Hyun (Jira)" <ji...@apache.org> on 2025/12/18 07:42:00 UTC

[jira] [Commented] (SPARK-54624) Ensure user name in historypage get escaped

    [ https://issues.apache.org/jira/browse/SPARK-54624?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18046116#comment-18046116 ] 

Dongjoon Hyun commented on SPARK-54624:
---------------------------------------

This is backported to branch-4.0 via https://github.com/apache/spark/pull/53424

> Ensure user name in historypage get escaped
> -------------------------------------------
>
>                 Key: SPARK-54624
>                 URL: https://issues.apache.org/jira/browse/SPARK-54624
>             Project: Spark
>          Issue Type: Sub-task
>          Components: Web UI
>    Affects Versions: 4.1.0, 4.0.1, 3.5.7
>            Reporter: Kousuke Saruta
>            Assignee: Kousuke Saruta
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 4.1.0, 4.0.2
>
>
> Similar to SPARK-53337, user name should get escaped because arbitrary user name can be set through the env var SPARK_USER.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org