Nemcio/SCM-Manager
1
0
Fork 0
mirror of https://github.com/scm-manager/scm-manager.git synced 2026-02-05 22:29:11 +01:00
Code Issues Packages Projects Releases Activity

Fix accidentally blocked requests with non ascii characters (#1480)

Browse Source
This commit is contained in:
Sebastian Sdorra
2020-12-17 12:03:31 +01:00
committed by GitHub
parent d9af69b1c2
commit 07ec042f22
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
scm-webapp/src/main/java/sonia/scm/lifecycle/modules/ScmSecurityModule.java
View File

@@ -27,7 +27,6 @@ package sonia.scm.lifecycle.modules;
//~--- non-JDK imports --------------------------------------------------------
import com.google.inject.name.Names;
import org.apache.shiro.authc.Authenticator;
import org.apache.shiro.authc.credential.DefaultPasswordService;
import org.apache.shiro.authc.credential.PasswordService;
@@ -119,6 +118,10 @@ public class ScmSecurityModule extends ShiroWebModule
// bind constant
bindConstant().annotatedWith(Names.named("shiro.loginUrl")).to("/index.html");
// do not block non ascii character,
// because this would exclude languages which are non ascii based
bindConstant().annotatedWith(Names.named("shiro.blockNonAscii")).to(false);
// disable access to mustache resources
addFilterChain("/**.mustache", filterConfig(ROLES, "nobody"));