Skip to content

Commit 9e160f8

Browse files
author
zhourenjian
committed
Fixed bug that servlet returning cross site script with incorrect "\\" wrap-up breaks down Simple RPC process.
1 parent edb733e commit 9e160f8

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

sources/net.sf.j2s.ajax/ajaxrpc/net/sf/j2s/ajax/SimpleRPCHttpServlet.java

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -320,7 +320,8 @@ protected void doGet(HttpServletRequest req, HttpServletResponse resp)
320320
PrintWriter writer = resp.getWriter();
321321
writer.write("net.sf.j2s.ajax.SimpleRPCRequest.xssNotify(");
322322
writer.write("\"" + requestID + "\", \"");
323-
writer.write(serialize.replaceAll("\r", "\\\\r")
323+
writer.write(serialize.replaceAll("\\\\", "\\\\\\\\")
324+
.replaceAll("\r", "\\\\r")
324325
.replaceAll("\n", "\\\\n")
325326
.replaceAll("\"", "\\\\\""));
326327
writer.write("\");");

0 commit comments

Comments
 (0)