-
Bug
-
Resolution: Duplicate
-
Major
-
None
-
OS X; firefox; latest hudson download as of March 9, 2010
When the console output of a build prints out html metacharacters, they are not escaped when printed to the page, resulting in a messed up display at best, xss vulnerability at worst.
Steps:
1. Configure a job that runs some build
2. Make sure that build prints out some html or xml (eg from unit test logs) or just anything with <s and >s
3. Run the build, observe the console output
- duplicates
-
JENKINS-5852 Console output no longer escapes <
- Closed