logjam_core
logjam_core copied to clipboard
Log excerpts should be properly escaped
Currently the live stream and the error list views don't escape html specials chars (such as < > &
) in the log excerpt correctly.
Example log line:
Riak client error: #<SocketError: Unexpected EOF on PBC socket> for #<Riak::Client::Beefcake>
The live stream does not seem to escape it at all (which could cause XSS):
Riak client error: # for #
The error list view seems to double-escape it:
Riak client error: #<SocketError: Unexpected EOF on PBC socket> for #<Riak::Client::Beefcake>