Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-08-07 07:37:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

WW-2414 - failsafe sanitization of querystring params

Browse Source 
git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@614814 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
James Mitchell
2008-01-24 07:39:45 +00:00
parent 28ee8f79d1
commit 09147ffad2
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/src/main/java/org/apache/struts2/views/util/UrlHelper.java
+7 -3
View File
@@ -174,10 +174,14 @@ public class UrlHelper {
buildParametersString(params, link, "&");
}
String result;
String result = link.toString();
if (result.indexOf("<script>") >= 0){
result = result.replaceAll("<script>", "script");
}
try {
result = encodeResult ? response.encodeURL(link.toString()) : link.toString();
result = encodeResult ? response.encodeURL(result) : result;
} catch (Exception ex) {
// Could not encode the URL for some reason
// Use it unchanged