[jira] [Commented] (SOLR-6098) SOLR console displaying JSON does not escape text properly

["Stefan Matheis (steffkes) (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SOLR-6098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14003837#comment-14003837 ] 

Stefan Matheis (steffkes) commented on SOLR-6098:
-------------------------------------------------

You're not telling, which release you're referring to? from your description, that sounds a bit like SOLR-5174 which got fixed with 4.5. please let me know if that's your issue as well - in which case upgrading would already fix it and i'm going to close this as duplicate or it's something else and needs to be taken care of

> SOLR console displaying JSON does not escape text properly
> ----------------------------------------------------------
>
>                 Key: SOLR-6098
>                 URL: https://issues.apache.org/jira/browse/SOLR-6098
>             Project: Solr
>          Issue Type: Bug
>          Components: web gui
>            Reporter: Kingston Duffie
>            Priority: Minor
>
> In the SOLR admin web console, when displaying JSON response for Query, the text is not being HTML escaped, so any text that happens to match HTML markup is being processed as HTML. 
> For example, enter "<strike>hello</strike>" in the "q" textbox and the responseHeader will contain:
> "q": "body:hello" where the "hello" portion is shown using strikeout.  
> This seems benign, but can be extremely confusing when viewing results, because if your fields happen to contain, for example, <fo...@bar.com>, this will be completely missing (because the browser treats this as an invalid tag).



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org