XSS sanitize standard page url parameters

James Moger

2014-09-06 dfaf1fc1f6d8214bcabb9a613d53d0f0dc45352c

 src/main/java/com/gitblit/wicket/pages/ChangePasswordPage.java

@@ -97,7 +97,7 @@


            user.password = password;

            try {

               app().gitblit().updateUserModel(user.username, user, false);

               app().gitblit().reviseUser(user.username, user);

               if (app().settings().getBoolean(Keys.web.allowCookieAuthentication, false)) {

                  WebResponse response = (WebResponse) getRequestCycle().getResponse();

                  app().authentication().setCookie(response.getHttpServletResponse(), user);