Fix authentication security hole with external providers

James Moger

2014-03-18 b4a63aad7f56486c164a15ae2477bcd251b0bb1b

 src/main/java/com/gitblit/git/PatchsetReceivePack.java

@@ -163,11 +163,11 @@


   /** Extracts the ticket id from the ref name */

   private long getTicketId(String refName) {

      if (refName.indexOf('%') > -1) {

         refName = refName.substring(0, refName.indexOf('%'));

      }

      if (refName.startsWith(Constants.R_FOR)) {

         String ref = refName.substring(Constants.R_FOR.length());

         if (ref.indexOf('%') > -1) {

            ref = ref.substring(0, ref.indexOf('%'));

         }

         try {

            return Long.parseLong(ref);

         } catch (Exception e) {