zzz/i2p.i2p
1
0
Fork 0
forked from I2P_Developers/i2p.i2p
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

lint core, console, i2ptunnel, jetty

Browse Source
This commit is contained in:
zzz
2015-10-17 17:38:57 +00:00
parent 71bc55b470
commit abc0f4c720
11 changed files with 25 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
apps/routerconsole/jsp/configui.jsp
View File

@@ -31,7 +31,7 @@ input.default {
<%@include file="formhandler.jsi" %>
<div class="configure"><div class="topshimten"><h3><%=uihelper._t("Router Console Theme")%></h3></div>
<form action="" method="POST">
<input type="hidden" name="consoleNonce" value="<%=intl.getNonce()%>" >
<input type="hidden" name="consoleNonce" value="<%=net.i2p.router.web.CSSHelper.getNonce()%>" >
<input type="hidden" name="nonce" value="<%=pageNonce%>" >
<input type="hidden" name="action" value="blah" >
<%

2
apps/routerconsole/jsp/console.jsp
View File

@@ -10,7 +10,7 @@
<%@include file="summaryajax.jsi" %>
</head><body onload="initAjax()">
<%
String consoleNonce = intl.getNonce();
String consoleNonce = net.i2p.router.web.CSSHelper.getNonce();
%>
<%@include file="summary.jsi" %>

2
apps/routerconsole/jsp/css.jsi
View File

@@ -37,7 +37,7 @@
}
String conNonceParam = request.getParameter("consoleNonce");
if (intl.getNonce().equals(conNonceParam)) {
if (net.i2p.router.web.CSSHelper.getNonce().equals(conNonceParam)) {
intl.setLang(request.getParameter("lang"));
intl.setNews(request.getParameter("news"));
}

2
apps/routerconsole/jsp/home.jsp
View File

@@ -8,7 +8,7 @@
<%@include file="summaryajax.jsi" %>
</head><body onload="initAjax()">
<%
String consoleNonce = intl.getNonce();
String consoleNonce = net.i2p.router.web.CSSHelper.getNonce();
%>
<jsp:useBean class="net.i2p.router.web.NewsHelper" id="newshelper" scope="request" />
<jsp:setProperty name="newshelper" property="contextId" value="<%=(String)session.getAttribute(\"i2p.contextId\")%>" />

2
apps/routerconsole/jsp/summaryframe.jsp
View File

@@ -23,7 +23,7 @@
if (!shutdownSoon) {
if (d == null || "".equals(d)) {
// set below
} else if (intl.getNonce().equals(conNonceParam)) {
} else if (net.i2p.router.web.CSSHelper.getNonce().equals(conNonceParam)) {
d = net.i2p.data.DataHelper.stripHTML(d); // XSS
intl.setRefresh(d);
intl.setDisableRefresh(d);