On Mon, Feb 20, 2012 at 03:53:00PM +0800, Mark Wu wrote:
Hi All,
I have a question about _filterXmlChars. If only printable ascii
characters appear in the message reported by ovirt-guest-agent,
then we needn't call _filterXmlChars() because the unicode shouldn't
contain the restricted xml chars. Am I right ?
We cannot trust the guest agent. The guest may be administered by evil
Eve, trying to cause Vdsm DoS by reporting application names with
illegal characters.