/[Apache-SVN]
ViewVC logotype

Revision 1763629

Jump to revision: Previous Next
Author: radu
Date: Thu Oct 6 16:44:00 2016 UTC (7 years, 7 months ago)
Changed paths: 5
Log Message: 
SLING-6094 - HTL can generate invalid Java code by using user-supplied input

* made sure that generated variables, even if they contain user-input, are correctly
and uniformly escaped

Changed paths

Path Details
Directorysling/trunk/bundles/scripting/sightly/engine/src/main/java/org/apache/sling/scripting/sightly/impl/engine/compiled/SourceIdentifier.java modified , text changed
Directorysling/trunk/bundles/scripting/sightly/java-compiler/src/main/java/org/apache/sling/scripting/sightly/java/compiler/JavaEscapeUtils.java added
Directorysling/trunk/bundles/scripting/sightly/java-compiler/src/main/java/org/apache/sling/scripting/sightly/java/compiler/impl/VariableAnalyzer.java modified , text changed
Directorysling/trunk/bundles/scripting/sightly/java-compiler/src/main/java/org/apache/sling/scripting/sightly/java/compiler/impl/utils/JavaEscapeUtils.java deleted
Directorysling/trunk/bundles/scripting/sightly/java-compiler/src/main/java/org/apache/sling/scripting/sightly/java/compiler/package-info.java modified , text changed
infrastructure at apache.org
 ViewVC Help
Powered by ViewVC 1.1.26