Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
ARSnova Backend
Manage
Activity
Members
Labels
Code
Merge requests
0
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Operate
Environments
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Help
Help
Support
GitLab documentation
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Privacy
Imprint
Contact
Snippets
Groups
Projects
Show more breadcrumbs
Paul-Christian Volkmer
ARSnova Backend
Commits
31446d38
Commit
31446d38
authored
12 years ago
by
Daniel Gerhardt
Browse files
Options
Downloads
Patches
Plain Diff
Use @RequestParam-Annotation for referer parameter.
parent
ad790484
Branches
Branches containing commit
Tags
Tags containing commit
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
src/main/java/de/thm/arsnova/controller/LoginController.java
+2
-1
2 additions, 1 deletion
src/main/java/de/thm/arsnova/controller/LoginController.java
with
2 additions
and
1 deletion
src/main/java/de/thm/arsnova/controller/LoginController.java
+
2
−
1
View file @
31446d38
...
...
@@ -80,6 +80,7 @@ public class LoginController extends AbstractController {
public
final
View
doLogin
(
@RequestParam
(
"type"
)
final
String
type
,
@RequestParam
(
value
=
"user"
,
required
=
false
)
final
String
guestName
,
@RequestParam
(
value
=
"referer"
,
required
=
false
)
final
String
forcedReferer
,
final
HttpServletRequest
request
,
final
HttpServletResponse
response
)
throws
IOException
,
ServletException
{
...
...
@@ -87,7 +88,7 @@ public class LoginController extends AbstractController {
if
(
referer
==
null
)
{
/* Use a url from a request parameter as referer as long as the url is not absolute (to prevent
* abuse of the redirection). */
if
(
null
==
(
referer
=
request
.
getParameter
(
"r
eferer
"
)
)
&&
UrlUtils
.
isAbsoluteUrl
(
referer
))
{
if
(
null
==
(
referer
=
forcedR
eferer
)
&&
UrlUtils
.
isAbsoluteUrl
(
referer
))
{
referer
=
"/"
;
}
}
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment