hazza/DSpace
1
0
Fork 0
mirror of https://github.com/DSpace/DSpace.git synced 2025-10-07 10:04:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9518 from DSpace/backport-9289-to-dspace-7_x

Browse Source 
[Port dspace-7_x] Validation of page url in FeedbackRestRepository
This commit is contained in:
Tim Donohue
2024-04-30 13:42:32 -05:00
committed by GitHub
parent 4636410894 0cfe4aec73
commit aafc111c98
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
dspace-server-webapp/src/main/java/org/dspace/app/rest/repository/FeedbackRestRepository.java
View File

@@ -79,8 +79,14 @@ public class FeedbackRestRepository extends DSpaceRestRepository<FeedbackRest, I
throw new DSpaceBadRequestException("e-mail and message fields are mandatory!"); throw new DSpaceBadRequestException("e-mail and message fields are mandatory!");
} }
String pageUrl = feedbackRest.getPage();
String urlPrefix = configurationService.getProperty("dspace.ui.url");
if (StringUtils.isNotBlank(pageUrl) && ! StringUtils.startsWith(pageUrl, urlPrefix)) {
throw new DSpaceBadRequestException("unexpected page url was submitted");
}
try { try {
feedbackService.sendEmail(context, req, recipientEmail, senderEmail, message, feedbackRest.getPage()); feedbackService.sendEmail(context, req, recipientEmail, senderEmail, message, pageUrl);
} catch (IOException | MessagingException e) { } catch (IOException | MessagingException e) {
throw new RuntimeException(e.getMessage(), e); throw new RuntimeException(e.getMessage(), e);
} }
@@ -100,4 +106,4 @@ public class FeedbackRestRepository extends DSpaceRestRepository<FeedbackRest, I
this.feedbackService = feedbackService; this.feedbackService = feedbackService;
} }
} }