XML reserved characters are not escaped when being used in XML configuration files
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 42/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- rust
- Domain
- devops, infrastructure
Research direction
Locate the code that renders XML-based configuration from parameter values, then reproduce the failure with an ampersand or another reserved character. Confirm that the generated configuration remains valid XML and that NiFi can start successfully with the escaped value.
Written by the indexing model from the issue text.
Description
Affected Stackable version
25.7
Affected Apache NiFi version
2.4.0
Current and expected behavior
When the Stackable NiFi operator takes a parameter value and uses it in one of its XML-based configuration files it does not escape reserved characters. This means that if the value contains a character such as an ampersand (&) then the result is malformed XML document that cannot be parsed, causing NiFi to fail on startup.
Possible solution
The operator should escape any reserved characters when it includes a parameter value e.g. replacing & with &.
Additional context
No response
Environment
No response
Would you like to work on fixing this bug?
None
- Dominant language
- Rust
- Stars
- 48
- Forks
- 12
- Avg merge
- 11h 26m
- Merged PRs (30d)
- 10
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from stackabletech/nifi-operator
-
Difficulty 3/5 1-2 days Newbie friendliness 68/100
stackabletech/nifi-operator#956 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
stackabletech/nifi-operator#879 ·
-
size/M type/security
Difficulty 5/5 Over a week Newbie friendliness 25/100
stackabletech/nifi-operator#811 · 1 comment ·
-
size/L
Difficulty 5/5 Over a week Newbie friendliness 20/100
stackabletech/nifi-operator#810 · 1 comment ·
-
epic size/XL type/security
Difficulty 5/5 Over a week Newbie friendliness 15/100
stackabletech/nifi-operator#809 ·
All issues in stackabletech/nifi-operator
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
-
bug core
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
-
JIT-compiled number -> Decimal conversion silently overflows instead of raising DECIMAL_OVERFLOW Openfuzz
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
ClickHouse/ClickHouse#122114 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 92/100
linebender/vello_svg#90 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100