SEC-1820: Added null check for attributesToFetch in OpenID4JavaConsumer.

2026-05-22 21:33:16 +00:00 · 2011-09-20 21:46:21 +01:00
parent 4a000d040c
commit a573e7b395
1 changed files with 1 additions and 1 deletions
@@ -195,7 +195,7 @@ public class OpenID4JavaConsumer implements OpenIDConsumer {
    List<OpenIDAttribute> fetchAxAttributes(Message authSuccess, List<OpenIDAttribute> attributesToFetch)
            throws OpenIDConsumerException {

-        if (!authSuccess.hasExtension(AxMessage.OPENID_NS_AX)) {
+        if (attributesToFetch == null || !authSuccess.hasExtension(AxMessage.OPENID_NS_AX)) {
            return Collections.emptyList();
        }