Merge pull request #2 from Deli82/master

JamieSlome · web-flow · commit af5025822785 · 2020-02-14T16:31:33.000Z
Merging fix - on-behalf of @Deli82, executed by huntr.dev (009-java-openid-connect-java-spring-server).
diff --git a/openid-connect-server-webapp/src/main/webapp/WEB-INF/tags/header.tag b/openid-connect-server-webapp/src/main/webapp/WEB-INF/tags/header.tag
@@ -55,7 +55,7 @@
     	
 		// get the info of the current user, if available (null otherwise)
     	function getUserInfo() {
-    		return ${userInfoJson};
+    		return ${fn:escapeXml(userInfoJson)};
     	}
 		
 		// get the authorities of the current user, if available (null otherwise)

Original file line number	Diff line number	Diff line change
`@@ -55,7 +55,7 @@`
`55`	`55`
`56`	`56`	`// get the info of the current user, if available (null otherwise)`
`57`	`57`	`function getUserInfo() {`
`58`		`- return ${userInfoJson};`
	`58`	`+ return ${fn:escapeXml(userInfoJson)};`
`59`	`59`	`}`
`60`	`60`
`61`	`61`	`// get the authorities of the current user, if available (null otherwise)`