Apache
/
lucene
mirror of https://github.com/apache/lucene.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SOLR-1031: Fix XSS vulnerability in schema.jsp 

git-svn-id: https://svn.apache.org/repos/asf/lucene/solr/trunk@746481 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Erik Hatcher 2009-02-21 10:44:13 +00:00
parent 16b846d1b8
commit 160765bdd6
2 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
CHANGES.txt
View File

@ -267,6 +267,10 @@ Bug Fixes
32. SOLR-1018: Slave is unable to replicate when server acts as repeater (as both master and slave) 32. SOLR-1018: Slave is unable to replicate when server acts as repeater (as both master and slave)
(Akshay Ukey, Noble Paul via shalin) (Akshay Ukey, Noble Paul via shalin)
33. SOLR-1026: Add protected words support to SnowballPorterFilterFactory (ehatcher)
34. SOLR-1031: Fix XSS vulnerability in schema.jsp (Paul Lovvik via ehatcher)
Other Changes Other Changes
---------------------- ----------------------

12
src/webapp/web/admin/schema.jsp
View File

@ -490,14 +490,10 @@
var numTerms = 0; var numTerms = 0;
$.each(topTerms, function(term, count) { $.each(topTerms, function(term, count) {
var row = document.createElement('tr'); var c1 = $('<td>').text(term);
var c1 = document.createElement('td'); var c2 = $('<td>').text(count);
c1.innerHTML=term; var row = $('<tr>').append(c1).append(c2);
var c2 = document.createElement('td'); tbody.appendChild(row.get(0));
c2.innerHTML=count;
row.appendChild(c1);
row.appendChild(c2);
tbody.appendChild(row);
numTerms++; numTerms++;
}); });
tbl.appendChild(tbody); tbl.appendChild(tbody);