Эх сурвалжийг харах

HUE-6197 [impala] Fix XSS Vulnerability in the old editors' error messages

Enrico Berti 8 жил өмнө
parent
commit
2f8e9fe

+ 1 - 1
apps/beeswax/src/beeswax/templates/execute.mako

@@ -2251,7 +2251,7 @@ $(document).on('error.query', function () {
       errorWidgets.push(
         codeMirror.addLineWidget(
           selectedLine > 0 ? selectedLine - 1 : selectedLine,
-          $("<div>").addClass("editorError").html("<i class='fa fa-exclamation-circle'></i> " + err)[0], {
+          $("<div>").addClass("editorError").text(err)[0], {
             coverGutter: true,
             noHScroll: true
           }