diff --git a/apps/jetty/java/src/net/i2p/servlet/filters/XSSFilter.java b/apps/jetty/java/src/net/i2p/servlet/filters/XSSFilter.java index a093354d31f9c459160700be24a256034c230238..b29892e70f6a7f85fb3f1b90b78d0704e00f948b 100644 --- a/apps/jetty/java/src/net/i2p/servlet/filters/XSSFilter.java +++ b/apps/jetty/java/src/net/i2p/servlet/filters/XSSFilter.java @@ -10,6 +10,9 @@ import javax.servlet.ServletRequest; import javax.servlet.ServletResponse; import javax.servlet.http.HttpServletRequest; +/** + * @since 0.9.14 + */ public class XSSFilter implements Filter { @Override public void init(FilterConfig filterConfig) throws ServletException { diff --git a/apps/jetty/java/src/net/i2p/servlet/filters/XSSRequestWrapper.java b/apps/jetty/java/src/net/i2p/servlet/filters/XSSRequestWrapper.java index 93228079bdf8252e1208abaaa11da2b1d1ac6633..de81897435ea04757b0943eb108d717cb5b850a4 100644 --- a/apps/jetty/java/src/net/i2p/servlet/filters/XSSRequestWrapper.java +++ b/apps/jetty/java/src/net/i2p/servlet/filters/XSSRequestWrapper.java @@ -10,10 +10,13 @@ import javax.servlet.http.HttpServletRequestWrapper; import net.i2p.I2PAppContext; import net.i2p.util.Log; +/** + * @since 0.9.14 + */ public class XSSRequestWrapper extends HttpServletRequestWrapper { // Adapted from https://owasp-esapi-java.googlecode.com/svn/trunk/configuration/esapi/ESAPI.properties - private static Pattern parameterValuePattern = Pattern.compile("^[a-zA-Z0-9.,:\\-\\/+=@_ \r\n]*$"); - private static Pattern headerValuePattern = Pattern.compile("^[a-zA-Z0-9()\\-=\\*\\.\\?;,+\\/:&_ ]*$"); + private static final Pattern parameterValuePattern = Pattern.compile("^[\\p{L}\\p{Nd}.,:\\-\\/+=~\\[\\]?@_ \r\n]*$"); + private static final Pattern headerValuePattern = Pattern.compile("^[a-zA-Z0-9()\\-=\\*\\.\\?;,+\\/:&_ ]*$"); public XSSRequestWrapper(HttpServletRequest servletRequest) { super(servletRequest); diff --git a/router/java/src/net/i2p/router/RouterVersion.java b/router/java/src/net/i2p/router/RouterVersion.java index a85b0c8aa2faad9a57c47d199b308409e19bf19d..9535f12e9f688854edee123340f66844f29b31e9 100644 --- a/router/java/src/net/i2p/router/RouterVersion.java +++ b/router/java/src/net/i2p/router/RouterVersion.java @@ -18,7 +18,7 @@ public class RouterVersion { /** deprecated */ public final static String ID = "Monotone"; public final static String VERSION = CoreVersion.VERSION; - public final static long BUILD = 22; + public final static long BUILD = 23; /** for example "-test" */ public final static String EXTRA = "-rc";