cloudera/hue — pull request #130 by petro-rudenko (2014-12-05 17:32:39+00:00)
Title: [Oozie] XSS attack vulnerability

Fixes #129
Hue is vulnerable to [XSS](http://en.wikipedia.org/wiki/Cross-site_scripting) attack. Steps to reproduce:
go to oozie editor -> bundle -> create -> Advanced settings -> add:
name =
```javascript

```
![XSS](http://storage6.static.itmages.com/i/14/1204/h_1417721409_8690634_2fc32c1b58.png)

save this bundle. After selecting it you'll get XSS allert.