[ 
https://issues.apache.org/jira/browse/DIRSHARED-143?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Stefan Seelmann updated DIRSHARED-143:
--------------------------------------

    Attachment: DIRSHARED-143.patch

Here is a patch, it contains my proposed format(String, String[]) method as 
well as an encodeFilterValue(String) method (that code is copied from 
AbstractExprNode).

I didn't commit because I'm unsure about the right place/module/package for the 
class. If committed we should also use the encodeFilterValue(String) from 
AbstractExprNode.escapeFilterValue() to avoid code duplication.

                
> Provide helper method to escape characters to be used in LDAP Filter literal
> ----------------------------------------------------------------------------
>
>                 Key: DIRSHARED-143
>                 URL: https://issues.apache.org/jira/browse/DIRSHARED-143
>             Project: Directory Shared
>          Issue Type: Improvement
>    Affects Versions: 1.0.0-M13
>            Reporter: Hendy Irawan
>         Attachments: DIRSHARED-143.patch
>
>
> In order to prevent malicious injection, user-provided input must be escaped 
> (the 5 restricted characters) before being put in LDAP filter.
> Provide a helper static method to make it convenient and available as public 
> API.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to