瀏覽代碼

HUE-4814 [oozie] fixing oozie job submitter should escape XML params

Prakash Ranade 9 年之前
父節點
當前提交
19940662d0
共有 1 個文件被更改,包括 2 次插入1 次删除
  1. 2 1
      desktop/libs/liboozie/src/liboozie/utils.py

+ 2 - 1
desktop/libs/liboozie/src/liboozie/utils.py

@@ -28,6 +28,7 @@ import logging
 import re
 import time
 from time import strftime
+from django.utils.html import escape
 
 LOG = logging.getLogger(__name__)
 _NAME_REGEX = re.compile('^[a-zA-Z][\-_a-zA-Z0-0]*$')
@@ -62,7 +63,7 @@ def config_gen(dic):
   print >> sio, "<configuration>"
   for k, v in dic.iteritems():
     print >> sio, "<property>\n  <name>%s</name>\n  <value><![CDATA[%s]]></value>\n</property>\n" \
-        % (k, v)
+        % (k, escape(v))
   print >>sio, "</configuration>"
   sio.flush()
   sio.seek(0)