Merged #216 "Whitelist the "target" link attribute in the XSS filter"

James Moger

2014-11-04 eb8089f0ee407fdda97b29848f923f8c92a402f4

 src/main/java/com/gitblit/utils/FileUtils.java

@@ -296,7 +296,7 @@
      Path exactBase = Paths.get(getExactFile(basePath).toURI());

      Path exactPath = Paths.get(getExactFile(path).toURI());

      if (exactPath.startsWith(exactBase)) {

         return exactBase.relativize(exactPath).toString();

         return exactBase.relativize(exactPath).toString().replace('\\', '/');

      }

      // no relative relationship

      return null;