From 366c463274f3ca06d500c59c0839feb225b4e0b5 Mon Sep 17 00:00:00 2001
From: Thomas Lenz <tlenz@iaik.tugraz.at>
Date: Mon, 27 Nov 2017 12:11:45 +0100
Subject: add escaping on some places

---
 .../src/main/resources/mainGUI/iframeLBKUdetect.html                   | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

(limited to 'id/server/moa-id-frontend-resources/src/main/resources/mainGUI/iframeLBKUdetect.html')

diff --git a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/iframeLBKUdetect.html b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/iframeLBKUdetect.html
index 261e19a33..f54484307 100644
--- a/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/iframeLBKUdetect.html
+++ b/id/server/moa-id-frontend-resources/src/main/resources/mainGUI/iframeLBKUdetect.html
@@ -9,7 +9,6 @@
 	bkuport = (bkuprot == "https:" ? 3496 : 3495);
 	bkupath = "https-security-layer-request";
 	bkuurl = bkuprot + "//" + bkuhost + ":" + bkuport + "/" + bkupath;
-	baseurl = location.href.substr(0, location.href.lastIndexOf("/"));
 //-->
 </script>
 </head>
@@ -20,7 +19,7 @@
 		parent.setBKUAvailable(false);
 		document.write('<form name="bkudetectform" method="POST" target="bkudetect" action="' + bkuurl + '" enctype="application/x-www-form-urlencoded">');
 		document.write('<input type="hidden" name="XMLRequest" value="&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt;&lt;NullOperationRequest xmlns=&quot;http://www.buergerkarte.at/namespaces/securitylayer/1.2#&quot;/&gt;" />');
-		document.write('<input type="hidden" name="RedirectURL" value="' + baseurl + '/iframeLBKUdetected.html"/>');
+		document.write('<input type="hidden" name="RedirectURL" value="' + $contextPath + '/iframeLBKUdetected.html"/>');
 		document.write('</form>');
 		try {
 			document.bkudetectform.submit();
-- 
cgit v1.2.3