Merged #164 "Sanitize page parameters for XSS vulerabilities"

James Moger

2014-09-07 f9c661ef5d2a422f246b3a089bee06470ae1d431

 src/main/java/com/gitblit/wicket/pages/ChangePasswordPage.java

@@ -97,7 +97,7 @@


            user.password = password;

            try {

               app().gitblit().updateUserModel(user.username, user, false);

               app().gitblit().reviseUser(user.username, user);

               if (app().settings().getBoolean(Keys.web.allowCookieAuthentication, false)) {

                  WebResponse response = (WebResponse) getRequestCycle().getResponse();

                  app().authentication().setCookie(response.getHttpServletResponse(), user);