From 11b5950be66bcc9d6f0bb28d3fc9d211bc70f4d9 Mon Sep 17 00:00:00 2001
From: tknall <tknall@7b5415b0-85f9-ee4d-85bd-d5d0c3b42d1c>
Date: Tue, 16 Mar 2010 12:07:29 +0000
Subject: Catching OutOfMemory exceptions, returning appropriate error
 message/code Binary signature: bug concerning indirect pdf objects fixed
 SignaturePositioning improved (Signature position can be declared by String
 which is parsed) Some more error codes (Out of memory, Invalid signature
 position) iText utility for creation of pdf files added ConfigUtils updated
 (destination of configuration to be extracted can now be chosen) PDFASUtils
 updated (more tools) WebApplication: Freetext pdf creation implemented
 WebApplication: XSS security updates

git-svn-id: https://joinup.ec.europa.eu/svn/pdf-as/trunk@580 7b5415b0-85f9-ee4d-85bd-d5d0c3b42d1c
---
 src/main/webapp/jsp/error.jsp | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

(limited to 'src/main/webapp/jsp/error.jsp')

diff --git a/src/main/webapp/jsp/error.jsp b/src/main/webapp/jsp/error.jsp
index d135f88..8a06691 100644
--- a/src/main/webapp/jsp/error.jsp
+++ b/src/main/webapp/jsp/error.jsp
@@ -8,6 +8,7 @@
 <%@ page import="org.apache.commons.httpclient.util.EncodingUtil" %>
 <%@ page import="org.apache.commons.httpclient.NameValuePair" %>
 <%@ page import="at.gv.egiz.pdfas.web.helper.SignServletHelper" %>
+<%@ page import="org.apache.commons.lang.StringEscapeUtils" %>
 <%@ page import="java.io.*" %>
 
 <%@ include file="language.jsp" %>
@@ -80,12 +81,12 @@
 		<div class="pdfasnote">
 			<% if (rb) { %>
 				<fmt:message key="<%= error %>"/>
-			<% } else { out.write(error); } %>
+			<% } else { out.write(StringEscapeUtils.escapeHtml(error)); } %>
 		</div>
 		<div class="pdfasnote"><fmt:message key="error.cause"/>: <strong>
 			<% if (rb) { %>
 				<fmt:message key="<%= cause %>"/>
-			<% } else { out.write(cause); } %>
+			<% } else { out.write(StringEscapeUtils.escapeHtml(cause)); } %>
 		</strong></div>
 		<% if (!isExternalInvocation && !paramInvok) { %>
 			<div class="pdfasverticalspace"></div>
@@ -99,7 +100,7 @@
 		    pe.printStackTrace(pw);
 		    sw.close();
 		    pw.close();
-		    out.print(sw);
+		    out.print(StringEscapeUtils.escapeHtml(sw.toString()));
 		  }
 		%>
 		</pre>
-- 
cgit v1.2.3