KEYCLOAK-2510

This commit is contained in:
Bill Burke 2016-02-29 20:39:44 -05:00
parent c0d0c1f39a
commit 32d15e2027
4 changed files with 4 additions and 3 deletions

View file

@ -113,6 +113,7 @@ public class TransformerUtil {
transformerFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true); transformerFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
} catch (TransformerConfigurationException ignored) { } catch (TransformerConfigurationException ignored) {
// some platforms don't support this. For example our testsuite pulls Selenium which requires Xalan 2.7.1 // some platforms don't support this. For example our testsuite pulls Selenium which requires Xalan 2.7.1
logger.warn("XML External Entity switches are not supported. You may get XML injection vulnerabilities.");
} }
try { try {
transformerFactory.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, ""); transformerFactory.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, "");
@ -120,6 +121,7 @@ public class TransformerUtil {
transformerFactory.setAttribute(XMLConstants.ACCESS_EXTERNAL_STYLESHEET, ""); transformerFactory.setAttribute(XMLConstants.ACCESS_EXTERNAL_STYLESHEET, "");
} catch (Exception ignored) { } catch (Exception ignored) {
// some platforms don't support this. For example our testsuite pulls Selenium which requires Xalan 2.7.1 // some platforms don't support this. For example our testsuite pulls Selenium which requires Xalan 2.7.1
logger.warn("XML External Entity switches are not supported. You may get XML injection vulnerabilities.");
} }
} finally { } finally {

View file

@ -1315,10 +1315,9 @@ module.factory('PasswordPolicy', function() {
if (!policies || policies.length == 0) { if (!policies || policies.length == 0) {
return ""; return "";
} }
var policyString = ""; var policyString = "";
for (var i in policies){ for (var i = 0; i < policies.length; i++) {
policyString += policies[i].name; policyString += policies[i].name;
if ( policies[i].value ){ if ( policies[i].value ){
policyString += '(' + policies[i].value + ')'; policyString += '(' + policies[i].value + ')';

View file

@ -34,7 +34,7 @@
placeholder="{{:: 'no-value-assigned.placeholder' | translate}}" min="1" required> placeholder="{{:: 'no-value-assigned.placeholder' | translate}}" min="1" required>
</td> </td>
<td class="kc-action-cell"> <td class="kc-action-cell">
<button type="button" class="btn btn-default btn-block btn-sm" ng-click="removePolicy($index)">{{:: 'delete' | translate}}</button> <button class="btn btn-default btn-block btn-sm" ng-click="removePolicy($index)">{{:: 'delete' | translate}}</button>
</td> </td>
</tr> </tr>
</tbody> </tbody>