github
/
OpenID-Connect-Java-Spring-Server
mirror of https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

escaped output values on approval page, closes #1111

pull/823/merge
Justin Richer 2017-05-10 17:39:48 -04:00
parent a316306f33
commit 7e6864ff38
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
openid-connect-server-webapp/src/main/webapp/WEB-INF/views/approve.jsp
View File

@ -148,11 +148,11 @@
<i class="icon-info-sign"></i> <spring:message code="approve.warning"/>: <i class="icon-info-sign"></i> <spring:message code="approve.warning"/>:
</h4> </h4>
<spring:message code="approve.no_redirect_uri"/> <spring:message code="approve.no_redirect_uri"/>
<spring:message code="approve.redirect_uri" arguments="${redirect_uri}"/> <spring:message code="approve.redirect_uri" arguments="${ fn:escapeXml(redirect_uri) }"/>
</div> </div>
</c:when> </c:when>
<c:otherwise> <c:otherwise>
<spring:message code="approve.redirect_uri" arguments="${redirect_uri}" /> <spring:message code="approve.redirect_uri" arguments="${ fn:escapeXml(redirect_uri) }" />
</c:otherwise> </c:otherwise>
</c:choose> </c:choose>
</div> </div>