From 624c382652b69a1d27b7fbf5981ae3be34102e2b Mon Sep 17 00:00:00 2001 From: zzz Date: Wed, 14 Feb 2018 17:35:23 +0000 Subject: [PATCH] i2psnark: Fix NPE on torrent not found (ticket #2167) --- .../java/src/org/klomp/snark/web/I2PSnarkServlet.java | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/apps/i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java b/apps/i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java index c5f1ca00e..ea6d12a94 100644 --- a/apps/i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java +++ b/apps/i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java @@ -2951,8 +2951,8 @@ public class I2PSnarkServlet extends BasicServlet { if (parent) // always true buf.append("
\n
"); // for stop/start/check - final boolean er = isTopLevel && _manager.util().ratingsEnabled(); - final boolean ec = isTopLevel && _manager.util().commentsEnabled(); // global setting + final boolean er = isTopLevel && snark != null && _manager.util().ratingsEnabled(); + final boolean ec = isTopLevel && snark != null && _manager.util().commentsEnabled(); // global setting final boolean esc = ec && _manager.getSavedCommentsEnabled(snark); // per-torrent setting final boolean includeForm = showStopStart || showPriority || er || ec; if (includeForm) { @@ -3237,7 +3237,7 @@ public class I2PSnarkServlet extends BasicServlet { .append(_t("Resource Not found")) .append("").append(_t("Resource")).append(":").append(r.toString()) .append("").append(_t("Base")).append(":").append(base) - .append("").append(_t("Torrent")).append(":").append(torrentName) + .append("").append(_t("Torrent")).append(":").append(DataHelper.escapeHTML(torrentName)) .append("\n"); } buf.append("\n"); @@ -3248,7 +3248,7 @@ public class I2PSnarkServlet extends BasicServlet { .append(_t("Resource Does Not Exist")) .append("").append(_t("Resource")).append(":").append(r.toString()) .append("").append(_t("Base")).append(":").append(base) - .append("").append(_t("Torrent")).append(":").append(torrentName) + .append("").append(_t("Torrent")).append(":").append(DataHelper.escapeHTML(torrentName)) .append("
\n\n"); return buf.toString(); }