mirror of
https://github.com/i2p/i2p.i2p.git
synced 2026-09-29 17:38:37 +00:00
Merge pull request #173 from Nick2k4L/fix/V-39-XSS-Tunnel-Fields
Fix: V-39-XSS
This commit is contained in:
@@ -66,7 +66,7 @@ public class EditBean extends IndexBean {
|
||||
}
|
||||
|
||||
public String getPrivateKeyFile(int tunnel) {
|
||||
return _helper.getPrivateKeyFile(tunnel);
|
||||
return DataHelper.escapeHTML(_helper.getPrivateKeyFile(tunnel));
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -74,7 +74,7 @@ public class EditBean extends IndexBean {
|
||||
* @since 0.9.30
|
||||
*/
|
||||
public String getAltPrivateKeyFile(int tunnel) {
|
||||
return _helper.getAltPrivateKeyFile(tunnel);
|
||||
return DataHelper.escapeHTML(_helper.getAltPrivateKeyFile(tunnel));
|
||||
}
|
||||
|
||||
/****
|
||||
@@ -330,7 +330,7 @@ public class EditBean extends IndexBean {
|
||||
* @since 0.9.40
|
||||
*/
|
||||
public String getFilterDefinition(int tunnel) {
|
||||
return _helper.getFilterDefinition(tunnel);
|
||||
return DataHelper.escapeHTML(_helper.getFilterDefinition(tunnel));
|
||||
}
|
||||
|
||||
public String getJumpList(int tunnel) {
|
||||
|
||||
@@ -544,7 +544,7 @@ public class IndexBean {
|
||||
}
|
||||
|
||||
public String getClientInterface(int tunnel) {
|
||||
return _helper.getClientInterface(tunnel);
|
||||
return DataHelper.escapeHTML(_helper.getClientInterface(tunnel));
|
||||
}
|
||||
|
||||
public int getTunnelStatus(int tunnel) {
|
||||
@@ -564,7 +564,7 @@ public class IndexBean {
|
||||
}
|
||||
|
||||
public String getClientDestination(int tunnel) {
|
||||
return _helper.getClientDestination(tunnel);
|
||||
return DataHelper.escapeHTML(_helper.getClientDestination(tunnel));
|
||||
}
|
||||
|
||||
/**
|
||||
|
||||
Reference in New Issue
Block a user