From e7883877a98dfcae3f75f1c1a562120d89aed22a Mon Sep 17 00:00:00 2001 From: James Moger <james.moger@gitblit.com> Date: Thu, 09 Feb 2012 08:33:16 -0500 Subject: [PATCH] Fixed session fixation vulnerability (issue 62) --- src/com/gitblit/wicket/pages/MarkdownPage.java | 5 +++-- 1 files changed, 3 insertions(+), 2 deletions(-) diff --git a/src/com/gitblit/wicket/pages/MarkdownPage.java b/src/com/gitblit/wicket/pages/MarkdownPage.java index fc8b7cb..aaf12ba 100644 --- a/src/com/gitblit/wicket/pages/MarkdownPage.java +++ b/src/com/gitblit/wicket/pages/MarkdownPage.java @@ -39,7 +39,8 @@ RevCommit commit = JGitUtils.getCommit(r, objectId); // markdown page links - add(new Label("blameLink", getString("gb.blame"))); + add(new BookmarkablePageLink<Void>("blameLink", BlamePage.class, + WicketUtils.newPathParameter(repositoryName, objectId, markdownPath))); add(new BookmarkablePageLink<Void>("historyLink", HistoryPage.class, WicketUtils.newPathParameter(repositoryName, objectId, markdownPath))); add(new BookmarkablePageLink<Void>("rawLink", RawPage.class, WicketUtils.newPathParameter( @@ -48,7 +49,7 @@ WicketUtils.newPathParameter(repositoryName, Constants.HEAD, markdownPath))); // Read raw markdown content and transform it to html - String markdownText = JGitUtils.getRawContentAsString(r, commit, markdownPath); + String markdownText = JGitUtils.getStringContent(r, commit.getTree(), markdownPath); String htmlText; try { htmlText = MarkdownUtils.transformMarkdown(markdownText); -- Gitblit v1.9.1