Changeset 5115

Timestamp:

07/24/08 07:57:56 (3 months ago)

Author:

jouni.koivuviita@…

Message:

Fixed a possible security vulnerability in IWindow. The window caption string was not escaped, and any HTML could be passed and parsed inside it.

Files:

• trunk/src/com/itmill/toolkit/terminal/gwt/client/ui/IWindow.java (modified) (1 diff)

trunk/src/com/itmill/toolkit/terminal/gwt/client/ui/IWindow.java

@@ -492 +492 @@
 
     public void setCaption(String c, String icon) {
-        String html = c;
+        String html = Util.escapeHTML(c);
         if (icon != null) {
             icon = client.translateToolkitUri(icon);