Rumprun guests receive &, < and > as \u0026, \u003c and \u003e
Maintainers usually reply within 1 day
@Sarthak-Shreshtha01 is already working on this.
Since Oct 10, 2026.
- #1101 by @Sarthak-Shreshtha01 — open
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 78/100
- Issue type
- Bug
- Clarity
- Clearly specified
- Activity status
- Active
- Tech stack
- go
- Domain
- infrastructure
Research direction
Start in pkg/unikontainers/unikernels/rumprun.go at CommandString and inspect how json.Marshal builds the Rumprun config. Reproduce the issue with ampersands and angle brackets in environment values and arguments, then add regression coverage showing these characters reach the guest unchanged.
Written by the indexing model from the issue text.
Description
urunc builds the Rumprun config with json.Marshal (CommandString in pkg/unikontainers/unikernels/rumprun.go), which HTML-escapes &, < and > by default. Rumprun's config parser passes string values through as they are and never undoes escapes, so these characters reach the guest as literal \u0026, \u003c and \u003e, in both env values and arguments. In arguments it's slightly worse, since Rumprun's argument parser then drops the backslash as well.
- Dominant language
- Go
- Stars
- 306
- Forks
- 214
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 26
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from urunc-dev/urunc
-
urunc-deploy cleanup never labels the node, so the cleanup DaemonSet does not runPossibly taken @Sarthak-Shreshtha01 claimed this 2 days ago. Openbug K8s/Tools
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
Maintainers usually reply within 1 day
-
documentation enhancement Storage
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
Maintainers usually reply within 1 day
-
Hooks run concurrently instead of in the listed orderMay be free again @anishmehta24 claimed this 13 days ago, and no pull request is open. OpenCore enhancement OCI
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
urunc-dev/urunc#1066 · 2 comments ·
Maintainers usually reply within 1 day
-
Flag to keep pulled images on local runs of e2ePossibly taken @slash-init claimed this 8 days ago. Opendev
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
urunc-dev/urunc#1057 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
urunc-dev/urunc#1021 · 4 comments ·
Maintainers usually reply within 1 day
Similar issues
-
ViewData can pair the in-flight proposal with the prepared flag of another proposalPossibly taken @HagarMeir claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
hyperledger/SmartBFT#710 ·
Maintainers usually reply within 1 day
-
agent-butler-finding chore
Difficulty 1/5 Under an hour Newbie friendliness 90/100
jordansmall/spindrift#5575 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
open-telemetry/opentelemetry-go-compile-instrumentation#1512 ·
Maintainers usually reply within 3 days
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
slavakurilyak/awesome-ai-agents#805 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
JakeChampion/lang#12684 ·
Maintainers usually reply within 1 day