Apache
/
lucene
mirror of https://github.com/apache/lucene.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix XSS vulnerability in analysis page 

git-svn-id: https://svn.apache.org/repos/asf/lucene/solr/trunk@669766 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Mike Klaas 2008-06-20 02:20:39 +00:00
parent 319fd2b028
commit 0150aeaf61
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/webapp/web/admin/analysis.jsp
View File

@ -122,12 +122,16 @@
try { try {
field = schema.getField(name); field = schema.getField(name);
} catch (Exception e) { } catch (Exception e) {
out.println("<strong>Unknown Field: " + name + "</strong>"); out.print("<strong>Unknown Field: ");
XML.escapeCharData(name, out);
out.println("</strong>");
} }
} else { } else {
FieldType t = schema.getFieldTypes().get(name); FieldType t = schema.getFieldTypes().get(name);
if (null == t) { if (null == t) {
out.println("<strong>Unknown Field Type: " + name + "</strong>"); out.print("<strong>Unknown Field Type: ");
XML.escapeCharData(name, out);
out.println("</strong>");
} else { } else {
field = new SchemaField("fakefieldoftype:"+name, t); field = new SchemaField("fakefieldoftype:"+name, t);
} }