Commiteda1a45

zhourenjian

committed

Fixed a bug on serializing to cross site script.

1 parentb8b205d commiteda1a45Copy full SHA for eda1a45

File tree

-3

lines changed

-3

lines changed

Lines changed: 3 additions & 3 deletions

Original file line number	Diff line number	Diff line change
`@@ -322,9 +322,9 @@ protected void doGet(HttpServletRequest req, HttpServletResponse resp)`
`322`	`322`	`PrintWriterwriter =resp.getWriter();`
`323`	`323`	`writer.write("net.sf.j2s.ajax.SimpleRPCRequest.xssNotify(");`
`324`	`324`	`writer.write("\"" +requestID +"\",\"");`
`325`		`-writer.write(serialize.replaceAll("\r","\\r")`
`326`		`-.replaceAll("\n","\\n")`
`327`		`-.replaceAll("\"","\\\""));`
	`325`	`+writer.write(serialize.replaceAll("\r","\\\\r")`
	`326`	`+.replaceAll("\n","\\\\n")`
	`327`	`+.replaceAll("\"","\\\\\""));`
`328`	`328`	`writer.write("\");");`
`329`	`329`	`return;`
`330`	`330`	`}`

Comments

(0)