dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

comment, clean up

Browse Source
This commit is contained in:
Jason White 2017-05-22 20:10:03 -04:00
parent a5b4aeaa76
commit a9e5dd645d
1 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
webgoat-lessons/cross-site-scripting/src/main/java/org/owasp/webgoat/plugin/StoredXssComments.java
View File

@ -74,10 +74,7 @@ public class StoredXssComments extends AssignmentEndpoint {
@ResponseBody @ResponseBody
public Collection<Comment> retrieveComments() { public Collection<Comment> retrieveComments() {
Collection<Comment> allComments = Lists.newArrayList(); Collection<Comment> allComments = Lists.newArrayList();
Collection<Comment> xmlComments = userComments.get(webSession.getUserName()); // no filtering applied here at render
if (xmlComments != null) {
allComments.addAll(xmlComments);
}
allComments.addAll(comments); allComments.addAll(comments);
return allComments; return allComments;
} }