Merged #187 "Restrict Gitblit cookie to the context path"

James Moger

2014-09-25 54cc7d7c2483d7ca100a5db47f4e1e98bd97c7fe

 src/main/java/com/gitblit/wicket/pages/TicketPage.java

@@ -249,17 +249,24 @@
         add(new Label("milestone"));

      } else {

         // link to milestone query

         TicketMilestone milestone = app().tickets().getMilestone(repository, ticket.milestone);

         PageParameters milestoneParameters = new PageParameters();

         milestoneParameters.put("r", repositoryName);

         TicketMilestone tm = app().tickets().getMilestone(repository, ticket.milestone);

         if (tm == null) {

            tm = new TicketMilestone(ticket.milestone);

         }

         PageParameters milestoneParameters;

         if (tm.isOpen()) {

            milestoneParameters = WicketUtils.newOpenTicketsParameter(repositoryName);

         } else {

            milestoneParameters = WicketUtils.newRepositoryParameter(repositoryName);

         }

         milestoneParameters.put(Lucene.milestone.name(), ticket.milestone);

         int progress = 0;

         int open = 0;

         int closed = 0;

         if (milestone != null) {

            progress = milestone.getProgress();

            open = milestone.getOpenTickets();

            closed = milestone.getClosedTickets();

         if (tm != null) {

            progress = tm.getProgress();

            open = tm.getOpenTickets();

            closed = tm.getClosedTickets();

         }



         Fragment milestoneProgress = new Fragment("milestone", "milestoneProgressFragment", this);

@@ -280,7 +287,9 @@
         desc = getString("gb.noDescriptionGiven");

      } else {

         String bugtraq = bugtraqProcessor().processText(getRepository(), repositoryName, ticket.body);

         desc = MarkdownUtils.transformGFM(app().settings(), bugtraq, ticket.repository);

         String html = MarkdownUtils.transformGFM(app().settings(), bugtraq, ticket.repository);

         String safeHtml = app().xssFilter().relaxed(html);

         desc = safeHtml;

      }

      add(new Label("ticketDescription", desc).setEscapeModelStrings(false));



@@ -516,7 +525,8 @@
      } else {

         // process the topic using the bugtraq config to link things

         String topic = bugtraqProcessor().processText(getRepository(), repositoryName, ticket.topic);

         add(new Label("ticketTopic", topic).setEscapeModelStrings(false));

         String safeTopic = app().xssFilter().relaxed(topic);

         add(new Label("ticketTopic", safeTopic).setEscapeModelStrings(false));

      }





@@ -696,6 +706,7 @@
                   */

                  String bugtraq = bugtraqProcessor().processText(getRepository(), repositoryName, entry.comment.text);

                  String comment = MarkdownUtils.transformGFM(app().settings(), bugtraq, repositoryName);

                  String safeComment = app().xssFilter().relaxed(comment);

                  Fragment frag = new Fragment("entry", "commentFragment", this);

                  Label commentIcon = new Label("commentIcon");

                  if (entry.comment.src == CommentSource.Email) {

@@ -704,7 +715,7 @@
                     WicketUtils.setCssClass(commentIcon, "iconic-comment-alt2-stroke");

                  }

                  frag.add(commentIcon);

                  frag.add(new Label("comment", comment).setEscapeModelStrings(false));

                  frag.add(new Label("comment", safeComment).setEscapeModelStrings(false));

                  addUserAttributions(frag, entry, avatarWidth);

                  addDateAttributions(frag, entry);

                  item.add(frag);

@@ -965,7 +976,8 @@
                  sb.append("</td></tr>");

               }

               sb.append("</tbody></table>");

               item.add(new Label("fields", sb.toString()).setEscapeModelStrings(false));

               String safeHtml = app().xssFilter().relaxed(sb.toString());

               item.add(new Label("fields", safeHtml).setEscapeModelStrings(false));

            } else {

               item.add(new Label("fields").setVisible(false));

            }