Nemcio/GitBucket
1
0
Fork 0
mirror of https://github.com/gitbucket/gitbucket.git synced 2025-11-16 02:15:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #615 from team-lab/fix/xss-by-raw-html

Browse Source 
fix/xss by raw html
This commit is contained in:
Naoki Takezoe
2015-02-01 12:44:15 +09:00
parent 6e4f6da633 9ba564c864
commit 0d81a9a9b6
5 changed files with 16 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/main/scala/app/RepositoryViewerController.scala
View File

@@ -214,8 +214,7 @@ trait RepositoryViewerControllerBase extends ControllerBase {
if(raw){
// Download
defining(JGitUtil.getContentFromId(git, objectId, false).get){ bytes =>
contentType = FileUtil.getContentType(path, bytes)
bytes
outputUploadedRawData(FileUtil.getContentType(path, bytes), bytes)
}
} else {
repo.html.blob(id, repository, path.split("/").toList, JGitUtil.getContentInfo(git, path, objectId),