Skip to content

Commit 76cd96d

Browse files
committed
Sanitize userInfoJson
1 parent 0d4ef2c commit 76cd96d

File tree

1 file changed

+1
-1
lines changed
  • openid-connect-server-webapp/src/main/webapp/WEB-INF/tags

1 file changed

+1
-1
lines changed

openid-connect-server-webapp/src/main/webapp/WEB-INF/tags/header.tag

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@
5555
5656
// get the info of the current user, if available (null otherwise)
5757
function getUserInfo() {
58-
return ${userInfoJson};
58+
return ${fn:escapeXml(userInfoJson)};
5959
}
6060
6161
// get the authorities of the current user, if available (null otherwise)

0 commit comments

Comments
 (0)