Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

states/statemgr: Avoid HTML escaping when printing LockInfo #20005

Merged
merged 1 commit into from
Jan 16, 2019

Conversation

radeksimko
Copy link
Member

I assume the intention here was to escape "early" and prevent any potential leakage of HTML-unsafe characters to TFE (or any other UI of that type), but I believe that TFE should just not rely on Terraform, especially when it has the right context to know when to escape.

Before

screen shot 2019-01-15 at 11 00 07

After

screen shot 2019-01-15 at 10 59 21

@radeksimko radeksimko added the bug label Jan 15, 2019
@radeksimko radeksimko requested a review from a team January 15, 2019 11:04
Copy link
Contributor

@apparentlymart apparentlymart left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems reasonable to me. My bet is instead that this was just an accident, since the text/template and html/template interfaces are so similar that it's easy to not think hard about which one to use for a particular situation.

@radeksimko radeksimko merged commit aaf4319 into master Jan 16, 2019
@radeksimko radeksimko deleted the b-statemgr-avoid-html-escaping branch January 16, 2019 19:30
@ghost
Copy link

ghost commented Mar 30, 2020

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@ghost ghost locked and limited conversation to collaborators Mar 30, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants