search

HomeAdvisor / Kafdrop

Kafka UI and Monitoring Tool
Apache License 2.0
399 stars 163 forks source link

Issue in viewing XML data in Topics #12

Open thammuio opened 7 years ago

thammuio commented 7 years ago

I have Web services writing data into Kafka in XML format. I am not able to view the messages properly in this topic. All the tags in XML are replaced with other special characters.

Does anybody else have this kind of issue,

Thanks, Suri

michael-pratt commented 7 years ago

Hi @thammuio , would it be possible to get a sample XML message that is in your topic and not viewable? We only use JSON internally so have not run into this.

thammuio commented 7 years ago

hi @michael-pratt, Thanks for the reply. I may not be able to share the the XML., but here is the screenshot: This is an XML formatted message. Also I am not able to view any of the XML messages in the topics, json messages works fine in other topics.

image

Please let me know if you need any other details.

Thanks, Suri

wucop commented 5 years ago

This issue leads also to a XSS vulnerability since the message is interpreted as html.

Just publish this message to a topic and view the message within KafkDrop: <SCRIPT>alert("XSS")</SCRIPT>

The pull request should be accepted in order to fix this issue.