Fix User name and other parameters potentially containing HTLM characters
Open
good first issue
kind:meta
- Dominant language
- Python
- Stars
- 46.9k
- Forks
- 17.8k
- Avg merge
- 2d 7h
- Merged PRs (30d)
- 484
Description
### Body
The User name and other parameters should be validated to not contain characters that might contain HTML-invalid characters. Also when they do, they should be escaped when rendered on HTML pages.
### Committer
- [X] I acknowledge that I am a maintainer/committer of the Apache Airflow project.
Contributor guide
Research direction
The issue concerns usernames and other parameters entering Airflow’s HTML pages. Start by tracing these values through the web UI and reviewing existing validation and rendering tests; done means affected inputs are safely handled without producing invalid or unsafe HTML.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100