packages: java-servletapi5/java-servletapi5-CVE-2009-0781.patch (NEW) - bac...

[pawelz]

Author: pawelz                       Date: Tue Jun  9 18:27:13 2009 GMT
Module: packages                      Tag: HEAD
---- Log message:
- backported from tomcat svn trunk

---- Files affected:
packages/java-servletapi5:
   java-servletapi5-CVE-2009-0781.patch (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: packages/java-servletapi5/java-servletapi5-CVE-2009-0781.patch
diff -u /dev/null packages/java-servletapi5/java-servletapi5-CVE-2009-0781.patch:1.1
--- /dev/null	Tue Jun  9 20:27:13 2009
+++ packages/java-servletapi5/java-servletapi5-CVE-2009-0781.patch	Tue Jun  9 20:27:08 2009
@@ -0,0 +1,13 @@
+Index: servletapi/jsr152/examples/cal/cal2.jsp
+===================================================================
+--- servletapi/jsr152/examples/cal/cal2.jsp	(wersja 750927)
++++ servletapi/jsr152/examples/cal/cal2.jsp	(wersja 750928)
+@@ -35,7 +35,7 @@
+ <FORM METHOD=POST ACTION=cal1.jsp>
+ <BR> 
+ <BR> <INPUT NAME="date" TYPE=HIDDEN VALUE="current">
+-<BR> <INPUT NAME="time" TYPE=HIDDEN VALUE=<%= util.HTMLFilter.filter(time) %>
++<BR> <INPUT NAME="time" TYPE=HIDDEN VALUE="<%= util.HTMLFilter.filter(time) %>">
+ <BR> <h2> Description of the event <INPUT NAME="description" TYPE=TEXT SIZE=20> </h2>
+ <BR> <INPUT TYPE=SUBMIT VALUE="submit">
+ </FORM>
================================================================