[jboss-jira] [JBoss JIRA] Created: (JBAS-6735) JMX console: Escape HTML characters of invocation output

Fri Apr 3 13:05:22 EDT 2009

JMX console: Escape HTML characters of invocation output
--------------------------------------------------------

                 Key: JBAS-6735
                 URL: https://jira.jboss.org/jira/browse/JBAS-6735
             Project: JBoss Application Server
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: JMX/Web Console
    Affects Versions: JBossAS-5.1.0.CR1
            Reporter: Ondrej Žižka
            Assignee: Darran Lofthouse

For an example, open JMX web console, go to the jboss:service=JNDIView MBean, and invoke its listXML() - which returns:

<context>
   <name>java:comp</name>
   <attribute name="bean">jboss.j2ee:jar=profileservice-secured.jar,name=SecureProfileService,service=EJB3</attribute>
   ...

However, JMX console doesn't escape HTML chars, so what you really see is:

  java:comp
  jboss.j2ee:jar=profileservice-secured.jar,name=SecureProfileService,service=EJB3
  ...

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira