Re: (tomcat) branch 9.0.x updated: Limit to 10 attributes. Add option to delete attribute.

[Mark Thomas]

On 03/12/2024 18:43, Tim Funk wrote:

I think this [URLEncoder.encode(name, StandardCharsets.UTF_8)] fails on
java8 compile (tomcat 9 issue only)

It will. Thanks for catching that. I'll get it fixed.

Mark

-Tim


On Tue, Dec 3, 2024 at 12:46 PM <ma...@apache.org> wrote:

The following commit(s) were added to refs/heads/9.0.x by this push:
      new c2f7ce21c3 Limit to 10 attributes. Add option to delete attribute.
c2f7ce21c3 is described below

--- a/webapps/examples/jsp/security/protected/index.jsp
+++ b/webapps/examples/jsp/security/protected/index.jsp

<SNIP>

  <tr>
    <td><%= util.HTMLFilter.filter(name) %></td>
-  <td><%=
util.HTMLFilter.filter(String.valueOf(session.getAttribute(name))) %></td>
+  <td><%= util.HTMLFilter.filter(value) %></td>
+  <td><a href='<%= response.encodeURL("index.jsp?dataName=" +
URLEncoder.encode(name, StandardCharsets.UTF_8)) %>'>delete</a></td>
  </tr>
  <%
    }

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org