KEYCLOAK-2510

This commit is contained in:
Bill Burke 2016-02-29 20:39:44 -05:00
parent c0d0c1f39a
commit 32d15e2027
4 changed files with 4 additions and 3 deletions

View file

@ -113,6 +113,7 @@ public class TransformerUtil {
transformerFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
} catch (TransformerConfigurationException ignored) {
// some platforms don't support this. For example our testsuite pulls Selenium which requires Xalan 2.7.1
logger.warn("XML External Entity switches are not supported. You may get XML injection vulnerabilities.");
}
try {
transformerFactory.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, "");
@ -120,6 +121,7 @@ public class TransformerUtil {
transformerFactory.setAttribute(XMLConstants.ACCESS_EXTERNAL_STYLESHEET, "");
} catch (Exception ignored) {
// some platforms don't support this. For example our testsuite pulls Selenium which requires Xalan 2.7.1
logger.warn("XML External Entity switches are not supported. You may get XML injection vulnerabilities.");
}
} finally {

View file

@ -1315,10 +1315,9 @@ module.factory('PasswordPolicy', function() {
if (!policies || policies.length == 0) {
return "";
}
var policyString = "";
for (var i in policies){
for (var i = 0; i < policies.length; i++) {
policyString += policies[i].name;
if ( policies[i].value ){
policyString += '(' + policies[i].value + ')';

View file

@ -34,7 +34,7 @@
placeholder="{{:: 'no-value-assigned.placeholder' | translate}}" min="1" required>
</td>
<td class="kc-action-cell">
<button type="button" class="btn btn-default btn-block btn-sm" ng-click="removePolicy($index)">{{:: 'delete' | translate}}</button>
<button class="btn btn-default btn-block btn-sm" ng-click="removePolicy($index)">{{:: 'delete' | translate}}</button>
</td>
</tr>
</tbody>