diff options
| author | Christian Maierhofer <cmaierhofer@iaik.tugraz.at> | 2016-04-26 15:15:35 +0200 |
|---|---|---|
| committer | Christian Maierhofer <cmaierhofer@iaik.tugraz.at> | 2016-04-26 15:15:35 +0200 |
| commit | 851f8c8ed0959c75a2bd28a61ff4cd5dd49f98f5 (patch) | |
| tree | c8ebfb28f538efc141661e3e47992fa14a68478b /id | |
| parent | 4c3ffb1cf320bcdfe02a08007f999f8a22f26f8b (diff) | |
| download | moa-id-spss-851f8c8ed0959c75a2bd28a61ff4cd5dd49f98f5.tar.gz moa-id-spss-851f8c8ed0959c75a2bd28a61ff4cd5dd49f98f5.tar.bz2 moa-id-spss-851f8c8ed0959c75a2bd28a61ff4cd5dd49f98f5.zip | |
fixed allowed url prefix check bug
Diffstat (limited to 'id')
| -rw-r--r-- | id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/pvp2x/PVP2XProtocol.java | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/pvp2x/PVP2XProtocol.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/pvp2x/PVP2XProtocol.java index bca080ba6..82e46b6ce 100644 --- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/pvp2x/PVP2XProtocol.java +++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/pvp2x/PVP2XProtocol.java @@ -525,7 +525,7 @@ public class PVP2XProtocol extends AbstractAuthProtocolModulController { boolean isAllowedDestination = false; for (String prefix : allowedPublicURLPrefix) { - if (!resp.getDestination().startsWith( + if (resp.getDestination().startsWith( prefix)) { isAllowedDestination = true; break; |