Merged #164 "Sanitize page parameters for XSS vulerabilities"

James Moger

2014-09-07 f9c661ef5d2a422f246b3a089bee06470ae1d431

 src/main/java/com/gitblit/utils/HttpUtils.java

@@ -80,7 +80,7 @@


        String context = request.getContextPath();

        String forwardedContext = request.getHeader("X-Forwarded-Context");

        if (forwardedContext != null) {

        if (StringUtils.isEmpty(forwardedContext)) {

           forwardedContext = request.getHeader("X_Forwarded_Context");

        }

        if (!StringUtils.isEmpty(forwardedContext)) {