Эх сурвалжийг харах

HUE-4814 [oozie] fixing oozie job submitter should escape XML params

Prakash Ranade 9 жил өмнө
parent
commit
19940662d0

+ 2 - 1
desktop/libs/liboozie/src/liboozie/utils.py

@@ -28,6 +28,7 @@ import logging
 import re
 import re
 import time
 import time
 from time import strftime
 from time import strftime
+from django.utils.html import escape
 
 
 LOG = logging.getLogger(__name__)
 LOG = logging.getLogger(__name__)
 _NAME_REGEX = re.compile('^[a-zA-Z][\-_a-zA-Z0-0]*$')
 _NAME_REGEX = re.compile('^[a-zA-Z][\-_a-zA-Z0-0]*$')
@@ -62,7 +63,7 @@ def config_gen(dic):
   print >> sio, "<configuration>"
   print >> sio, "<configuration>"
   for k, v in dic.iteritems():
   for k, v in dic.iteritems():
     print >> sio, "<property>\n  <name>%s</name>\n  <value><![CDATA[%s]]></value>\n</property>\n" \
     print >> sio, "<property>\n  <name>%s</name>\n  <value><![CDATA[%s]]></value>\n</property>\n" \
-        % (k, v)
+        % (k, escape(v))
   print >>sio, "</configuration>"
   print >>sio, "</configuration>"
   sio.flush()
   sio.flush()
   sio.seek(0)
   sio.seek(0)