Hi All,
I have a question about _filterXmlChars. If only printable ascii characters appear in the message reported by ovirt-guest-agent, then we needn't call _filterXmlChars() because the unicode shouldn't contain the restricted xml chars. Am I right ?
Thanks. Mark.
On Mon, Feb 20, 2012 at 03:53:00PM +0800, Mark Wu wrote:
Hi All,
I have a question about _filterXmlChars. If only printable ascii characters appear in the message reported by ovirt-guest-agent, then we needn't call _filterXmlChars() because the unicode shouldn't contain the restricted xml chars. Am I right ?
We cannot trust the guest agent. The guest may be administered by evil Eve, trying to cause Vdsm DoS by reporting application names with illegal characters.
On 02/20/2012 05:04 PM, Dan Kenigsberg wrote:
On Mon, Feb 20, 2012 at 03:53:00PM +0800, Mark Wu wrote:
Hi All,
I have a question about _filterXmlChars. If only printable ascii characters appear in the message reported by ovirt-guest-agent, then we needn't call _filterXmlChars() because the unicode shouldn't contain the restricted xml chars. Am I right ?
We cannot trust the guest agent. The guest may be administered by evil Eve, trying to cause Vdsm DoS by reporting application names with illegal characters.
Got it, thanks!
vdsm-devel@lists.fedorahosted.org