Author: markt
Date: Thu Aug 11 12:48:16 2011
New Revision: 1156603
URL: http://svn.apache.org/viewvc?rev=1156603&view=rev
Log:
Follow up to r1156533. Filter URL (mainly in case of &).
Modified:
tomcat/tc7.0.x/trunk/ (props changed)
tomcat/tc7.0.x/trunk/java/org/apache/catalina/connector/Response.java
Propchange: tomcat/tc7.0.x/trunk/
------------------------------------------------------------------------------
--- svn:mergeinfo (original)
+++ svn:mergeinfo Thu Aug 11 12:48:16 2011
@@ -1 +1 @@
-/tomcat/trunk:1156171,1156276,1156304,1156530
+/tomcat/trunk:1156171,1156276,1156304,1156530,1156602
Modified: tomcat/tc7.0.x/trunk/java/org/apache/catalina/connector/Response.java
URL:
http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/connector/Response.java?rev=1156603&r1=1156602&r2=1156603&view=diff
==============================================================================
--- tomcat/tc7.0.x/trunk/java/org/apache/catalina/connector/Response.java
(original)
+++ tomcat/tc7.0.x/trunk/java/org/apache/catalina/connector/Response.java Thu
Aug 11 12:48:16 2011
@@ -49,6 +49,7 @@ import org.apache.catalina.core.Applicat
import org.apache.catalina.security.SecurityUtil;
import org.apache.catalina.util.CharsetMapper;
import org.apache.catalina.util.DateTool;
+import org.apache.catalina.util.RequestUtil;
import org.apache.tomcat.util.buf.CharChunk;
import org.apache.tomcat.util.buf.UEncoder;
import org.apache.tomcat.util.http.FastHttpDateFormat;
@@ -1335,8 +1336,8 @@ public class Response
setStatus(SC_FOUND);
setHeader("Location", absolute);
PrintWriter writer = getWriter();
- writer.print(
- sm.getString("coyoteResponse.sendRedirect.note",
absolute));
+ writer.print(sm.getString("coyoteResponse.sendRedirect.note",
+ RequestUtil.filter(absolute)));
flushBuffer();
} catch (IllegalArgumentException e) {
setStatus(SC_NOT_FOUND);
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
