Rudder

and it does break the node details

I will keep that ticket for the general case, and in the meantime add a special check for uuid (#19457) and hostname (#19458).

Hostname and uuid are sanitize on inventory reception.
Need to see other fields.

Strategy:
- we sanitize all inventory fields appart inventory properties when parsing inventories,
- inventory properties: we need to check what to do here. Perhaps it's ok to sanize user values too.

hostname is not correctly escaped
using

<script>alert("bob");</script>

Uncaught SyntaxError: missing ) after argument listb56ca15c-643f-4f55-8ca8-37ed2bce44ae:2055:73

This bug has been fixed in Rudder 6.1.14 and 6.2.8 which were released today.

• 6.1.14 changelog
• 6.2.8 changelog
• Upgrade manual