Bug #6080: When using invalid XML character in the technique parameters, the generated matadata.xml is invalid - Rudder - Issue Tracker

Actions

Copy link

Bug #6080

closed

When using invalid XML character in the technique parameters, the generated matadata.xml is invalid

Added by Nicolas CHARLES over 9 years ago. Updated almost 2 years ago.

Status:

Released

Priority:

Assignee:

Vincent MEMBRÉ

Category:

Generic methods

Target version:

ncf-0.x

Pull Request:

https://github.com/Normation/ncf/pull...

Severity:

UX impact:

User visibility:

Effort required:

Priority:

Name check:

Fix check:

Regression:

Description

If i create a meta technique with ncf builder, and put a & in it (like, command execution /path/to/command && /bin/true) then the generated xml file is invalid
rudder log shows the following message:

ERROR com.normation.cfclerk.services.impl.GitTechniqueReader - Ignoring technique '/ncf_techniques/Test/1.0/metadata.xml' because the descriptor file is malformed. Error message was: Unexpected issue with the descriptor file /ncf_techniques/Test/1.0/metadata.xml at line 14, column 27: The entity name must immediately follow the '&' in the entity reference.

and Techniques are not reloaded

The generated metadata.xml contains:

<SECTION component="true" multivalued="true" name="Command execution">
      <REPORTKEYS>
        <VALUE>/bin/true && /bin/true</VALUE>
      </REPORTKEYS>
    </SECTION>
  </SECTIONS>