-
Notifications
You must be signed in to change notification settings - Fork 762
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
HTML/URI encode path/content where possible
- Loading branch information
Showing
6 changed files
with
49 additions
and
45 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -18,7 +18,7 @@ | |
| */ | ||
|
|
||
| /* | ||
| * Copyright (c) 2007, 2022, Oracle and/or its affiliates. All rights reserved. | ||
| * Copyright (c) 2007, 2025, Oracle and/or its affiliates. All rights reserved. | ||
| * Portions Copyright (c) 2017, 2019, Chris Fraire <[email protected]>. | ||
| */ | ||
| package org.opengrok.indexer.web; | ||
|
|
@@ -112,8 +112,7 @@ void breadcrumbPath() { | |
| // parent directories have a trailing slash in href | ||
| assertEquals("<a href=\"/r/a/\">a</a>/<a href=\"/r/a/b\">b</a>", | ||
| Util.breadcrumbPath("/r/", "a/b")); | ||
| // if basename is a dir (ends with file seperator), href link also | ||
| // ends with a '/' | ||
| // if basename is a dir (ends with file separator), href link also ends with a '/' | ||
| assertEquals("<a href=\"/r/a/\">a</a>/<a href=\"/r/a/b/\">b</a>/", | ||
| Util.breadcrumbPath("/r/", "a/b/")); | ||
| // should work the same way with a '.' as file separator | ||
|
|
@@ -129,11 +128,15 @@ void breadcrumbPath() { | |
| // Prefix gets just prefixed as is and not mangled wrt. path -> "//" | ||
| assertEquals("/<a href=\"/root//xx&project=y\">xx</a>", | ||
| Util.breadcrumbPath("/root/", "../xx", '/', "&project=y", true)); | ||
| // relative pathes are resolved wrt. / , so path resolves to /a/c/d | ||
| // relative paths are resolved wrt. / , so path resolves to /a/c/d | ||
| assertEquals("/<a href=\"/r//a/\">a</a>/" | ||
| + "<a href=\"/r//a/c/\">c</a>/" | ||
| + "<a href=\"/r//a/c/d\">d</a>", | ||
| Util.breadcrumbPath("/r/", "../a/b/../c//d", '/', "", true)); | ||
| // path components should be URI encoded and htmlized | ||
| assertEquals("<a href=\"/root/foo/&project=y\">foo</a>/" | ||
| + "<a href=\"/root/foo/bar%3E&project=y\">bar></a>", | ||
| Util.breadcrumbPath("/root/", "foo/bar>", '/', "&project=y", true)); | ||
| } | ||
|
|
||
| @Test | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -18,7 +18,7 @@ information: Portions Copyright [yyyy] [name of copyright owner] | |
| CDDL HEADER END | ||
| Copyright (c) 2005, 2022, Oracle and/or its affiliates. All rights reserved. | ||
| Copyright (c) 2005, 2025, Oracle and/or its affiliates. All rights reserved. | ||
| Portions Copyright 2011 Jens Elkner. | ||
| Portions Copyright (c) 2018-2020, Chris Fraire <[email protected]>. | ||
| --%> | ||
|
|
@@ -59,7 +59,7 @@ org.opengrok.indexer.web.Util" | |
| String path = cfg.getPath(); | ||
| if (path.length() > 0) { | ||
| if (!path.isEmpty()) { | ||
| String primePath = path; | ||
| Project project = cfg.getProject(); | ||
| if (project != null) { | ||
|
|
@@ -148,7 +148,7 @@ include file="/httpheader.jspf" | |
| request.setAttribute("history.jsp-slider", Util.createSlider(startIndex, max, totalHits, request)); | ||
| %> | ||
| <div id="Masthead">History log of | ||
| <%= Util.breadcrumbPath(context + Prefix.XREF_P, path,'/',"",true,cfg.isDir()) %> | ||
| <%= Util.breadcrumbPath(context + Prefix.XREF_P, path, '/', "", true, cfg.isDir()) %> | ||
| (Results <span class="bold"> <%= totalHits != 0 ? startIndex + 1 : 0 %> – <%= startIndex + thisPageIndex | ||
| %></span> of <span class="bold"><%= totalHits %></span>) | ||
| </div> | ||
|
|
@@ -231,11 +231,11 @@ document.domReady.push(function() {domReadyHistory();}); | |
| <th><input type="submit" value=" Compare "/> | ||
| <% if (hist.getHistoryEntries().size() > revision1Index && revision1Index >= 0) { %> | ||
| <input type="hidden" id="input_r1" name="<%= QueryParameters.REVISION_1_PARAM %>" | ||
| value="<%= path + '@' + hist.getHistoryEntries().get(revision1Index).getRevision() %>"/> | ||
| value="<%= Util.uriEncodePath(path) + '@' + hist.getHistoryEntries().get(revision1Index).getRevision() %>"/> | ||
| <% } %> | ||
| <% if (hist.getHistoryEntries().size() > revision2Index && revision2Index >= 0) { %> | ||
| <input type="hidden" id="input_r2" name="<%= QueryParameters.REVISION_2_PARAM %>" | ||
| value="<%= path + '@' + hist.getHistoryEntries().get(revision2Index).getRevision() %>"/> | ||
| value="<%= Util.uriEncodePath(path) + '@' + hist.getHistoryEntries().get(revision2Index).getRevision() %>"/> | ||
| <% } %> | ||
| </th><% | ||
| } | ||
|
|
@@ -259,11 +259,11 @@ document.domReady.push(function() {domReadyHistory();}); | |
| int count=0; | ||
| for (HistoryEntry entry : hist.getHistoryEntries(maxItems, startIndex)) { | ||
| String dispRev = entry.getDisplayRevision(); | ||
| if (dispRev == null || dispRev.length() == 0) { | ||
| if (dispRev == null || dispRev.isEmpty()) { | ||
| dispRev = ""; | ||
| } | ||
| String rev = entry.getRevision(); | ||
| if (rev == null || rev.length() == 0) { | ||
| if (rev == null || rev.isEmpty()) { | ||
| rev = ""; | ||
| } | ||
| String tags = hist.getTags().get(rev); | ||
|
|
@@ -323,7 +323,7 @@ document.domReady.push(function() {domReadyHistory();}); | |
| data-revision-1="<%= revision1Index %>" | ||
| data-revision-2="<%= (startIndex + count) %>" | ||
| data-diff-revision="<%= QueryParameters.REVISION_2_PARAM %>" | ||
| data-revision-path="<%= path + '@' + hist.getHistoryEntries().get(startIndex + count).getRevision() %>" | ||
| data-revision-path="<%= Util.htmlize(path) + '@' + hist.getHistoryEntries().get(startIndex + count).getRevision() %>" | ||
| <% | ||
| if (count + startIndex < revision2Index || (count + startIndex > revision2Index && count + startIndex <= revision1Index - 1)) { | ||
| // revision2 enabled | ||
|
|
@@ -354,7 +354,7 @@ document.domReady.push(function() {domReadyHistory();}); | |
| String author = entry.getAuthor(); | ||
| if (author == null) { | ||
| %>(no author)<% | ||
| } else if (userPage != null && userPage.length() > 0) { | ||
| } else if (userPage != null && !userPage.isEmpty()) { | ||
| String alink = Util.getEmail(author); | ||
| %><a href="<%= userPage + Util.htmlize(alink) + userPageSuffix | ||
| %>"><%= Util.htmlize(author)%></a><% | ||
|
|
@@ -367,10 +367,10 @@ document.domReady.push(function() {domReadyHistory();}); | |
| int summaryLength = Math.max(10, cfg.getRevisionMessageCollapseThreshold()); | ||
| String cout = Util.htmlize(entry.getMessage()); | ||
| if (bugPage != null && bugPage.length() > 0 && bugPattern != null) { | ||
| if (bugPage != null && !bugPage.isEmpty() && bugPattern != null) { | ||
| cout = Util.linkifyPattern(cout, bugPattern, "$1", Util.completeUrl(bugPage + "$1", request)); | ||
| } | ||
| if (reviewPage != null && reviewPage.length() > 0 && reviewPattern != null) { | ||
| if (reviewPage != null && !reviewPage.isEmpty() && reviewPattern != null) { | ||
| cout = Util.linkifyPattern(cout, reviewPattern, "$1", Util.completeUrl(reviewPage + "$1", request)); | ||
| } | ||
|
|
@@ -380,10 +380,10 @@ document.domReady.push(function() {domReadyHistory();}); | |
| showSummary = true; | ||
| coutSummary = coutSummary.substring(0, summaryLength - 1); | ||
| coutSummary = Util.htmlize(coutSummary); | ||
| if (bugPage != null && bugPage.length() > 0 && bugPattern != null) { | ||
| if (bugPage != null && !bugPage.isEmpty() && bugPattern != null) { | ||
| coutSummary = Util.linkifyPattern(coutSummary, bugPattern, "$1", Util.completeUrl(bugPage + "$1", request)); | ||
| } | ||
| if (reviewPage != null && reviewPage.length() > 0 && reviewPattern != null) { | ||
| if (reviewPage != null && !reviewPage.isEmpty() && reviewPattern != null) { | ||
| coutSummary = Util.linkifyPattern(coutSummary, reviewPattern, "$1", Util.completeUrl(reviewPage + "$1", request)); | ||
| } | ||
| } | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -18,7 +18,7 @@ information: Portions Copyright [yyyy] [name of copyright owner] | |
| CDDL HEADER END | ||
| Copyright (c) 2010, 2022, Oracle and/or its affiliates. All rights reserved. | ||
| Copyright (c) 2010, 2025, Oracle and/or its affiliates. All rights reserved. | ||
| Portions Copyright 2011 Jens Elkner. | ||
| Portions Copyright (c) 2018, 2020, Chris Fraire <[email protected]>. | ||
|
|
@@ -99,7 +99,7 @@ org.opengrok.indexer.web.SearchHelper" | |
| */ | ||
| Context sourceContext = new Context(tquery, qbuilder); | ||
| sourceContext.toggleAlt(); | ||
| // SRCROOT is read with UTF-8 as a default. | ||
| // Files under source root are read with UTF-8 as a default. | ||
| try (Reader r = IOUtils.createBOMStrippedReader( | ||
| new FileInputStream(resourceFile), | ||
| StandardCharsets.UTF_8.name())) { | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters