XSS sanitize standard page url parameters

James Moger

2014-09-06 dfaf1fc1f6d8214bcabb9a613d53d0f0dc45352c

 src/main/java/com/gitblit/wicket/pages/SessionPage.java

@@ -56,8 +56,8 @@
         // any changes to permissions or roles (issue-186)

         UserModel user = app().users().getUserModel(session.getUser().username);



         if (user.disabled) {

            // user was disabled during session

         if (user == null || user.disabled) {

            // user was deleted/disabled during session

            HttpServletResponse response = ((WebResponse) getRequestCycle().getResponse())

                  .getHttpServletResponse();

            app().authentication().logout(response, user);