Specific string that looks like Code injection as parameter breaks MarkLogic functions

Viewed 52

I have encountered a strange behavior of MarkLogic script evaluation (through qconsole or REST API) when trying to invoke ServerSide JavaScript functions. I was manipulating a JavaScript object that had a string property with text which includes that:

") -- or "

e.g. try to evaluate this script in qconsole:

fn.contains("text"," ) -- or ");

You can add any prefix and suffix to the second parameter, it always fail with 'Connection was reset' information, no matter how I invoke it, in qconsole or by REST API enter image description here

Can it be some sort of 'code injection' that breaks some internals? After that invocation I even could not find any entries in MarkLogic log regarding my calls.

MarkLogic Version: 10.0-9

0 Answers
Related