From e7883877a98dfcae3f75f1c1a562120d89aed22a Mon Sep 17 00:00:00 2001 From: James Moger <james.moger@gitblit.com> Date: Thu, 09 Feb 2012 08:33:16 -0500 Subject: [PATCH] Fixed session fixation vulnerability (issue 62) --- src/com/gitblit/wicket/pages/LogPage.java | 10 ++++++++-- 1 files changed, 8 insertions(+), 2 deletions(-) diff --git a/src/com/gitblit/wicket/pages/LogPage.java b/src/com/gitblit/wicket/pages/LogPage.java index 2554f7d..d3dc3a9 100644 --- a/src/com/gitblit/wicket/pages/LogPage.java +++ b/src/com/gitblit/wicket/pages/LogPage.java @@ -18,7 +18,7 @@ import org.apache.wicket.PageParameters; import org.apache.wicket.markup.html.link.BookmarkablePageLink; -import com.gitblit.wicket.RepositoryPage; +import com.gitblit.utils.StringUtils; import com.gitblit.wicket.WicketUtils; import com.gitblit.wicket.panels.LogPanel; @@ -27,10 +27,16 @@ public LogPage(PageParameters params) { super(params); + addSyndicationDiscoveryLink(); + int pageNumber = WicketUtils.getPage(params); int prevPage = Math.max(0, pageNumber - 1); int nextPage = pageNumber + 1; - LogPanel logPanel = new LogPanel("logPanel", repositoryName, objectId, getRepository(), -1, + String refid = objectId; + if (StringUtils.isEmpty(refid)) { + refid = getRepositoryModel().HEAD; + } + LogPanel logPanel = new LogPanel("logPanel", repositoryName, refid, getRepository(), -1, pageNumber - 1); boolean hasMore = logPanel.hasMore(); add(logPanel); -- Gitblit v1.9.1