[activemq] branch master updated: Properly encode the copy/move message URL.

[artnaseef]

This is an automated email from the ASF dual-hosted git repository.

artnaseef pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/activemq.git


The following commit(s) were added to refs/heads/master by this push:
     new 4450c17  Properly encode the copy/move message URL.
4450c17 is described below

commit 4450c17c1c836a1daa7541dcb944f35798258197
Author: artnaseef <artnas...@apache.org>
AuthorDate: Mon Aug 31 09:48:13 2020 -0700

    Properly encode the copy/move message URL.
---
 activemq-web-console/src/main/webapp/message.jsp | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/activemq-web-console/src/main/webapp/message.jsp 
b/activemq-web-console/src/main/webapp/message.jsp
index 262dc5e..132d596 100644
--- a/activemq-web-console/src/main/webapp/message.jsp
+++ b/activemq-web-console/src/main/webapp/message.jsp
@@ -234,9 +234,17 @@ function confirmAction(id, action) {
                return;
        }
        var value = select.options[selectedIndex].value;
-       var url = action + ".action?destination=" + value;
-       url += "&JMSDestination=${requestContext.messageQuery.JMSDestination}";
-       url += 
"&messageId=${row.JMSMessageID}&JMSDestinationType=queue&secret=${sessionScope['secret']}";
+       var url = action + ".action?destination=" + encodeURIComponent(value);
+
+       var url = action +
+               "<c:url value=".action">
+                     <c:param name="JMSDestination" 
value="${requestContext.messageQuery.JMSDestination}" />
+                     <c:param name="messageId" value="${row.JMSMessageID}" />
+                     <c:param name="JMSDestinationType" value="queue" />
+                     <c:param name="secret" value='${sessionScope["secret"]}' 
/>
+                 </c:url>";
+       url = url + "&destination=" + encodeURIComponent(value);
+
        if (confirm("Are you sure?"))
          location.href=url;
 }