portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From tay...@apache.org
Subject svn commit: r1726734 - /portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/view/security/usermanager2.jsp
Date Tue, 26 Jan 2016 05:58:02 GMT
Author: taylor
Date: Tue Jan 26 05:58:02 2016
New Revision: 1726734

URL: http://svn.apache.org/viewvc?rev=1726734&view=rev
Log:
further tightening security around new user manager service for sql injections.

Modified:
    portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/view/security/usermanager2.jsp

Modified: portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/view/security/usermanager2.jsp
URL: http://svn.apache.org/viewvc/portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/view/security/usermanager2.jsp?rev=1726734&r1=1726733&r2=1726734&view=diff
==============================================================================
--- portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/view/security/usermanager2.jsp
(original)
+++ portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/view/security/usermanager2.jsp
Tue Jan 26 05:58:02 2016
@@ -383,9 +383,9 @@ YUI({combine: true, timeout: 10000}).use
         Y.one('#inputUserName').set('value', dataOut.name);
         Y.one('#userDisplayName').setContent(dataOut.name);
         Y.one('#inputUserNameHidden').set('value', dataOut.name);
-        Y.one('#inputUserNameGiven').set('value', dataOut.infoMap["user.name.given"]);
-        Y.one('#inputUserNameFamily').set('value', dataOut.infoMap["user.name.family"]);
-        Y.one('#inputUserEmail').set('value', dataOut.infoMap["user.business-info.online.email"]);
+        Y.one('#inputUserNameGiven').set('value', Y.Lang.isUndefined(dataOut.infoMap["user.name.given"])
? '' : dataOut.infoMap["user.name.given"]);
+        Y.one('#inputUserNameFamily').set('value', Y.Lang.isUndefined(dataOut.infoMap["user.name.family"])
? '' : dataOut.infoMap["user.name.family"]);
+        Y.one('#inputUserEmail').set('value', Y.Lang.isUndefined(dataOut.infoMap["user.business-info.online.email"])
? '' : dataOut.infoMap["user.business-info.online.email"]);
         Y.one('#userEnabled').set('checked', dataOut.enabled);
         Y.one('#credentialUpdateRequired').set('checked', dataOut.credentialUpdateRequired);
 		Y.one('#editUserPage * #password').set('value', '');



---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Mime
View raw message