Skip to content
Snippets Groups Projects
Commit 31446d38 authored by Daniel Gerhardt's avatar Daniel Gerhardt
Browse files

Use @RequestParam-Annotation for referer parameter.

parent ad790484
Branches
Tags
No related merge requests found
......@@ -80,6 +80,7 @@ public class LoginController extends AbstractController {
public final View doLogin(
@RequestParam("type") final String type,
@RequestParam(value = "user", required = false) final String guestName,
@RequestParam(value = "referer", required = false) final String forcedReferer,
final HttpServletRequest request,
final HttpServletResponse response
) throws IOException, ServletException {
......@@ -87,7 +88,7 @@ public class LoginController extends AbstractController {
if (referer == null) {
/* Use a url from a request parameter as referer as long as the url is not absolute (to prevent
* abuse of the redirection). */
if (null == (referer = request.getParameter("referer")) && UrlUtils.isAbsoluteUrl(referer)) {
if (null == (referer = forcedReferer) && UrlUtils.isAbsoluteUrl(referer)) {
referer = "/";
}
}
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment