URL names in dashboard are not HTML escaped
See original GitHub issueURL names (for stats) are not HTML-escaped in the dashboard. This makes names with angle brackets disappear. For example:
self.client.get(url, name='/some-resource/upload/<uuid>')
would show up as /some-resource/upload/
instead of /some-resource/upload/<uuid>
which is confusing. There could be some XSS security concerns here as well.
Issue Analytics
- State:
- Created 8 years ago
- Comments:12 (7 by maintainers)
Top Results From Across the Web
URL escape codes
Character URL Escape Codes String Literal Escape Code
SPACE %20 $20
< %3C $3C
> %3E $3E
Read more >URL Actions not handling special characters in Internet ...
I have both "URL Encode Data Values" and "Allow Multiple Values" checked within the action with "," as the Item Delimiter and "\"...
Read more >When should I HTML-escape data and when should I URL- ...
Because it's a URL inside HTML. To be a valid URL, it has to contain only characters allowed in URLs, with invalid ones...
Read more >Re: How to prevent URL encoding of an external fie...
Using a Simple XML Dashboard, I have the following: ... URLValue are being encoded by Splunk prior to inserting into the link, and...
Read more >Escaping or Sanitizing HTML - RHQ 4.9 - Red Hat on GitHub
Examples of such fields in RHQ are a Resource's name or description, ... In such cases, we do not want to escape the...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
No, I just felt the urge to contribute back to the project I enjoy and used the Hacktoberfest label to filter low-hanging fruits.
I’m using locust here and there for a few years already 😃 Thanks for the guidance.