zzz/i2p.i2p
1
0
Fork 0
forked from I2P_Developers/i2p.i2p
Code Issues Pull Requests Packages Projects Releases Wiki Activity

i2ptunnel: Exempt tunnel name from XSS filter (Gitlab #467)

Browse Source
This commit is contained in:
zzz
2023-11-10 13:06:28 -05:00
parent f0b1ae9459
commit 11feb84d4a
5 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
apps/i2ptunnel/java/src/net/i2p/i2ptunnel/web/IndexBean.java
View File

@@ -710,7 +710,7 @@ public class IndexBean {
String getType() { return _config.getType(); }
/** Short name of the tunnel */
public void setName(String name) {
public void setNofilter_name(String name) {
_config.setName(name);
}
/** one line description */

2
apps/i2ptunnel/jsp/editClient.jsi
View File

@@ -44,7 +44,7 @@
</th>
</tr><tr>
<td>
<input type="text" size="30" maxlength="50" name="name" title="<%=intl._t("Name of tunnel to be displayed on Tunnel Manager home page and the router console sidebar")%>" value="<%=editBean.getTunnelName(curTunnel)%>" class="freetext tunnelName" />
<input type="text" size="30" maxlength="50" name="nofilter_name" title="<%=intl._t("Name of tunnel to be displayed on Tunnel Manager home page and the router console sidebar")%>" value="<%=editBean.getTunnelName(curTunnel)%>" class="freetext tunnelName" />
</td><td>
<%=tunnelTypeName%>
</td>

2
apps/i2ptunnel/jsp/editServer.jsi
View File

@@ -43,7 +43,7 @@
</th>
</tr><tr>
<td>
<input type="text" size="30" maxlength="50" name="name" title="<%=intl._t("Name of tunnel to be displayed on Tunnel Manager home page and the router console sidebar")%>" value="<%=editBean.getTunnelName(curTunnel)%>" class="freetext tunnelName" />
<input type="text" size="30" maxlength="50" name="nofilter_name" title="<%=intl._t("Name of tunnel to be displayed on Tunnel Manager home page and the router console sidebar")%>" value="<%=editBean.getTunnelName(curTunnel)%>" class="freetext tunnelName" />
</td><td>
<%=tunnelTypeName%>
</td>

2
apps/i2ptunnel/jsp/ssl.jsp
View File

@@ -407,7 +407,7 @@ input.default { width: 1px; height: 1px; visibility: hidden; }
// we only set the applicable server settings
editBean.setTunnel(tun);
editBean.setType(tunnelType);
editBean.setName(editBean.getTunnelName(curTunnel));
editBean.setNofilter_name(editBean.getTunnelName(curTunnel));
editBean.setTargetHost(editBean.getTargetHost(curTunnel));
editBean.setTargetPort(editBean.getTargetPort(curTunnel));
editBean.setSpoofedHost(editBean.getSpoofedHost(curTunnel));

6
apps/i2ptunnel/jsp/wizard.jsp
View File

@@ -218,7 +218,7 @@
<tr>
<td>
<span class="tag"><%=intl._t("Name")%>:</span>
<input type="text" size="30" maxlength="50" name="name" id="name" placeholder="New Tunnel" title="<%=intl._t("Name of tunnel to be displayed on Tunnel Manager home page and the router console sidebar")%>" value="<%=(!"null".equals(request.getParameter("name")) ? net.i2p.data.DataHelper.stripHTML(request.getParameter("name")) : "" ) %>" class="freetext" />
<input type="text" size="30" maxlength="50" name="nofilter_name" id="name" placeholder="New Tunnel" title="<%=intl._t("Name of tunnel to be displayed on Tunnel Manager home page and the router console sidebar")%>" value="<%=(!"null".equals(request.getParameter("nofilter_name")) ? net.i2p.data.DataHelper.stripHTML(request.getParameter("nofilter_name")) : "" ) %>" class="freetext" />
</td>
</tr>
<tr>
@@ -229,7 +229,7 @@
</tr>
<%
} else {
%><input type="hidden" name="name" value="<%=net.i2p.data.DataHelper.stripHTML(request.getParameter("name"))%>" />
%><input type="hidden" name="nofilter_name" value="<%=net.i2p.data.DataHelper.stripHTML(request.getParameter("nofilter_name"))%>" />
<input type="hidden" name="nofilter_description" value="<%=net.i2p.data.DataHelper.stripHTML(request.getParameter("nofilter_description"))%>" /><%
} /* curPage 3 */
@@ -470,7 +470,7 @@
} %>
</td></tr>
<tr><td><%=intl._t("Tunnel name")%></td>
<td><%=net.i2p.data.DataHelper.stripHTML(request.getParameter("name"))%></td></tr>
<td><%=net.i2p.data.DataHelper.stripHTML(request.getParameter("nofilter_name"))%></td></tr>
<tr><td><%=intl._t("Tunnel description")%></td>
<td><%=net.i2p.data.DataHelper.stripHTML(request.getParameter("nofilter_description"))%></td></tr>
<%