forked from I2P_Developers/i2p.i2p
Console: Don't list inner classes on /configlogging
Because the $ won't get through the XSS filter
This commit is contained in:
@@ -118,6 +118,9 @@ public class ConfigLoggingHelper extends HelperBase {
|
|||||||
|
|
||||||
for (Log log : logs) {
|
for (Log log : logs) {
|
||||||
String name = log.getName();
|
String name = log.getName();
|
||||||
|
// skip inner classes, the $ gets caught by the XSS filter
|
||||||
|
if (name.contains("$"))
|
||||||
|
continue;
|
||||||
if (!limits.contains(name))
|
if (!limits.contains(name))
|
||||||
sortedLogs.add(name);
|
sortedLogs.add(name);
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user