honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
OpenSearch/x-pack/plugin/watcher/licenses/failureaccess-1.0.1.jar.sha1

1 line
40 B
Plaintext
Raw Normal View History

Upgrade to the latest OWASP HTML sanitizer (#50765) (#51166) This commit upgrades the OWASP HTML sanitizer used by watcher to the latest version and also upgrades guava, which it depends on. The guava upgrade also requires the addition of a new dependency that guava itself requires as of version 27.0. The sanitizer's behavior has changed to re-write these templated values with a comment that results in this output `{<!-- -->{ctx.metadata.name}}`. This would be an issue if we attempted to sanitize the template, but the code that uses the sanitizer runs the rendered string through the sanitizer, which means that the templated values have been replaced already. Relates #50395
2020-01-17 12:00:33 -05:00
1dcf1de382a0bf95a3d8b0849546c88bac1292c9