using UriUtils.fromString to avoid XSS security vulnerability

Change-Id: Ia6aada15502dd1e4e6a53cf9e6067fbea6a07fef
This commit is contained in:
Axel Uhl committed 2016-01-08 11:01:54 +01:00
1 parent 29300c415d
commit 8246a64a3f
2 files changed
+4 -2

No files matched your search

@@ -1,5 +1,6 @@
package com.sap.sse.security.ui.oauth.client.util;
import com.google.gwt.safehtml.shared.UriUtils;
import com.google.gwt.user.client.Cookies;
import com.google.gwt.user.client.Window;
import com.google.gwt.user.client.Window.Location;
@@ -275,7 +276,7 @@ public class ClientUtils {
}
public static void redirect(String url) {
Window.Location.assign(url);
Window.Location.assign(UriUtils.fromString(url).asString());
}
public static boolean redirected() {