File apache-tomcat-CVE-2011-0013.patch of Package tomcat6

Overview Repositories Revisions Requests Users Attributes Meta

File apache-tomcat-CVE-2011-0013.patch of Package tomcat6

Index: apache-tomcat-6.0.20-src/java/org/apache/catalina/manager/HTMLManagerServlet.java
===================================================================
--- apache-tomcat-6.0.20-src/java/org/apache/catalina/manager/HTMLManagerServlet.java.orig	2011-02-11 09:56:52.784905566 +0100
+++ apache-tomcat-6.0.20-src/java/org/apache/catalina/manager/HTMLManagerServlet.java	2011-02-11 09:57:47.577968311 +0100
@@ -405,10 +405,11 @@
                 
                 args = new Object[7];
                 args[0] = URL_ENCODER.encode(displayPath);
-                args[1] = displayPath;
-                args[2] = context.getDisplayName();
-                if (args[2] == null) {
+                args[1] = RequestUtil.filter(displayPath);
+                if (context.getDisplayName() == null) {
                     args[2] = "&nbsp;";
+                } else {
+                    args[2] = RequestUtil.filter(context.getDisplayName());
                 }
                 args[3] = new Boolean(context.getAvailable());
                 args[4] = response.encodeURL
Index: apache-tomcat-6.0.20-src/java/org/apache/catalina/manager/StatusTransformer.java
===================================================================
--- apache-tomcat-6.0.20-src/java/org/apache/catalina/manager/StatusTransformer.java.orig	2011-02-11 09:52:53.818004683 +0100
+++ apache-tomcat-6.0.20-src/java/org/apache/catalina/manager/StatusTransformer.java	2011-02-11 09:57:47.579968387 +0100
@@ -575,7 +575,7 @@
                 }
 
                 writer.print("<a href=\"#" + (count++) + ".0\">");
-                writer.print(webModuleName);
+                writer.print(filter(webModuleName));
                 writer.print("</a>");
                 if (iterator.hasNext()) {
                     writer.print("<br>");
@@ -650,7 +650,7 @@
             }
 
             writer.print("<h1>");
-            writer.print(name);
+            writer.print(filter(name));
             writer.print("</h1>");
             writer.print("</a>");
 
@@ -778,11 +778,11 @@
                 mBeanServer.invoke(objectName, "findMappings", null, null);
             
             writer.print("<h2>");
-            writer.print(servletName);
+            writer.print(filter(servletName));
             if ((mappings != null) && (mappings.length > 0)) {
                 writer.print(" [ ");
                 for (int i = 0; i < mappings.length; i++) {
-                    writer.print(mappings[i]);
+                    writer.print(filter(mappings[i]));
                     if (i < mappings.length - 1) {
                         writer.print(" , ");
                     }

Places

File apache-tomcat-CVE-2011-0013.patch of Package tomcat6

Places