[cxf-fediz] branch master updated: fediz-oidc: put back StringEscapeUtils protecton

[buhhunyx]

This is an automated email from the ASF dual-hosted git repository.

buhhunyx pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cxf-fediz.git


The following commit(s) were added to refs/heads/master by this push:
     new 0f4ca55  fediz-oidc: put back StringEscapeUtils protecton
0f4ca55 is described below

commit 0f4ca5502fee9c2d97b10d14630bc34c78e4db1f
Author: Alexey Markevich <buhhu...@gmail.com>
AuthorDate: Thu Feb 27 21:32:04 2020 +0300

    fediz-oidc: put back StringEscapeUtils protecton
---
 .../fediz/service/oidc/handler/hrd/LoginHintHomeRealmDiscovery.java  | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git 
a/services/oidc/src/main/java/org/apache/cxf/fediz/service/oidc/handler/hrd/LoginHintHomeRealmDiscovery.java
 
b/services/oidc/src/main/java/org/apache/cxf/fediz/service/oidc/handler/hrd/LoginHintHomeRealmDiscovery.java
index c8031d2..8ac198c 100644
--- 
a/services/oidc/src/main/java/org/apache/cxf/fediz/service/oidc/handler/hrd/LoginHintHomeRealmDiscovery.java
+++ 
b/services/oidc/src/main/java/org/apache/cxf/fediz/service/oidc/handler/hrd/LoginHintHomeRealmDiscovery.java
@@ -24,6 +24,7 @@ import javax.security.auth.callback.Callback;
 import javax.security.auth.callback.CallbackHandler;
 import javax.security.auth.callback.UnsupportedCallbackException;
 
+import org.apache.commons.text.StringEscapeUtils;
 import org.apache.cxf.fediz.core.spi.HomeRealmCallback;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
@@ -49,10 +50,10 @@ public class LoginHintHomeRealmDiscovery implements 
CallbackHandler {
                 } else {
                     String[] homeRealm = loginHint.split("@");
                     if (homeRealm.length == 2) {
-                        LOG.debug("Home realm '{}' found in request", 
homeRealm[1]);
+                        LOG.debug("Home realm '{}' found in request", 
StringEscapeUtils.escapeHtml4(homeRealm[1]));
                         callback.setHomeRealm(homeRealm[1]);
                     } else {
-                        LOG.warn("login_hint is not an email address: {}", 
loginHint);
+                        LOG.warn("login_hint is not an email address: {}", 
StringEscapeUtils.escapeHtml4(loginHint));
                     }
                 }
             } else {