SOLR-1579: fixes to xml escaping in stats.jsp (the fix commited as part of SOLR-1008 was incorrect)

git-svn-id: https://svn.apache.org/repos/asf/lucene/solr/trunk@909705 13f79535-47bb-0310-9956-ffa450edef68

CHANGES.txt

@@ -175,6 +175,9 @@ Bug Fixes
 
 * SOLR-1736:In the slave , If 'mov'ing file does not succeed , copy the file (noble)  
 
+* SOLR-1579: Fixes to XML escaping in stats.jsp
+  (David Bowen and hossman)
+
 Other Changes
 ----------------------
 

src/webapp/web/admin/stats.jsp

@@ -27,12 +27,12 @@
 <solr>
   <%  
   if (core.getName() != null) { %> 
-	  <core><%=core.getName()%></core> 
+	  <core><% XML.escapeCharData(core.getName(), out); %></core> 
   <% } %>
-  <schema><%= collectionName %></schema>
-  <host><%= hostname %></host>
-  <now><%= new Date().toString() %></now>
-  <start><%= new Date(core.getStartTime()) %></start>
+  <schema><% XML.escapeCharData(collectionName, out); %></schema>
+  <host><% XML.escapeCharData(hostname, out); %></host>
+  <now><% XML.escapeCharData(new Date().toString(), out); %></now>
+  <start><% XML.escapeCharData(new Date(core.getStartTime()).toString(), out); %></start>
   <solr-info>
 <%
 for (SolrInfoMBean.Category cat : SolrInfoMBean.Category.values()) {
@@ -55,23 +55,23 @@ for (SolrInfoMBean.Category cat : SolrInfoMBean.Category.values()) {
 %>
     <entry>
       <name>
-        <%= key %>
+        <% XML.escapeCharData(key, out); %>
       </name>
       <class>
-        <%= name %>
+        <% XML.escapeCharData(name, out); %>
       </class>
       <version>
-        <%= vers %>
+        <% XML.escapeCharData(vers, out); %>
       </version>
       <description>
-        <%= desc %>
+        <% XML.escapeCharData(desc, out); %>
       </description>
       <stats>
 <%
       for (int i = 0; i < nl.size() ; i++) {
 %>
-        <stat name="<%XML.escapeCharData(nl.getName(i), out);  %>" >
-          <%= nl.getVal(i).toString() %>
+        <stat name="<% XML.escapeAttributeValue(nl.getName(i), out);  %>" >
+          <% XML.escapeCharData(nl.getVal(i).toString(), out); %>
         </stat>
 <%
       }