Return-Path: X-Original-To: apmail-hadoop-mapreduce-issues-archive@minotaur.apache.org Delivered-To: apmail-hadoop-mapreduce-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id AA938911A for ; Mon, 5 Mar 2012 02:46:47 +0000 (UTC) Received: (qmail 71306 invoked by uid 500); 5 Mar 2012 02:46:47 -0000 Delivered-To: apmail-hadoop-mapreduce-issues-archive@hadoop.apache.org Received: (qmail 70998 invoked by uid 500); 5 Mar 2012 02:46:47 -0000 Mailing-List: contact mapreduce-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: mapreduce-issues@hadoop.apache.org Delivered-To: mailing list mapreduce-issues@hadoop.apache.org Received: (qmail 70962 invoked by uid 99); 5 Mar 2012 02:46:46 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 05 Mar 2012 02:46:46 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED,T_RP_MATCHES_RCVD X-Spam-Check-By: apache.org Received: from [140.211.11.116] (HELO hel.zones.apache.org) (140.211.11.116) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 05 Mar 2012 02:46:45 +0000 Received: from hel.zones.apache.org (hel.zones.apache.org [140.211.11.116]) by hel.zones.apache.org (Postfix) with ESMTP id 4D9BC8192 for ; Mon, 5 Mar 2012 02:45:17 +0000 (UTC) Date: Mon, 5 Mar 2012 02:45:17 +0000 (UTC) From: "Arun C Murthy (Updated) (JIRA)" To: mapreduce-issues@hadoop.apache.org Message-ID: <1582539996.21185.1330915517560.JavaMail.tomcat@hel.zones.apache.org> In-Reply-To: <2096141827.3001.1317130272028.JavaMail.tomcat@hel.zones.apache.org> Subject: [jira] [Updated] (MAPREDUCE-3111) Fix log serving in NodeManager MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/MAPREDUCE-3111?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Arun C Murthy updated MAPREDUCE-3111: ------------------------------------- Fix Version/s: (was: 0.23.1) 0.24.0 > Fix log serving in NodeManager > ------------------------------ > > Key: MAPREDUCE-3111 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-3111 > Project: Hadoop Map/Reduce > Issue Type: Sub-task > Components: security > Affects Versions: 0.23.0 > Reporter: Luke Lu > Assignee: Luke Lu > Labels: security, webapp > Fix For: 0.24.0 > > > Just noticed that the current log serving is using the raw writer (instead of Hamlet) to serve logs without escaping html. > It's actually easier/cleaner to use Hamlet to serve logs: > {code} > pre._(buffer); > {code} > which takes care of content escaping automatically. > I will make raw writer access package private for framework use only. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira