forked from I2P_Developers/i2p.i2p
Console: Don't list inner classes on /configlogging
Because the $ won't get through the XSS filter
This commit is contained in:
@@ -118,6 +118,9 @@ public class ConfigLoggingHelper extends HelperBase {
|
||||
|
||||
for (Log log : logs) {
|
||||
String name = log.getName();
|
||||
// skip inner classes, the $ gets caught by the XSS filter
|
||||
if (name.contains("$"))
|
||||
continue;
|
||||
if (!limits.contains(name))
|
||||
sortedLogs.add(name);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user