You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@hbase.apache.org by "Sean Busbey (JIRA)" <ji...@apache.org> on 2017/01/27 19:41:24 UTC

[jira] [Created] (HBASE-17561) table status page should escape table name

Sean Busbey created HBASE-17561:
-----------------------------------

             Summary: table status page should escape table name
                 Key: HBASE-17561
                 URL: https://issues.apache.org/jira/browse/HBASE-17561
             Project: HBase
          Issue Type: Bug
          Components: master, UI
            Reporter: Sean Busbey
            Assignee: Sean Busbey


We write out table names to an html document without escaping html entities

e.g. in this case it even comes directly from the request
{code}
    <meta charset="utf-8">
    <% if ( !readOnly && action != null ) { %>
        <title>HBase Master: <%= master.getServerName() %></title>
    <% } else { %>
        <title>Table: <%= fqtn %></title>
    <% } %>
{code}

in https://github.com/apache/hbase/blob/master/hbase-server/src/main/resources/hbase-webapps/master/table.jsp



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)