Author: dumindu
Date: Thu Dec  6 04:04:13 2007
New Revision: 10636

Log:

Fix to remove any trailing parameters from the xmlToken



Modified:
   trunk/solutions/identity/modules/mod-cspace/mod_cspace.c

Modified: trunk/solutions/identity/modules/mod-cspace/mod_cspace.c
==============================================================================
--- trunk/solutions/identity/modules/mod-cspace/mod_cspace.c    (original)
+++ trunk/solutions/identity/modules/mod-cspace/mod_cspace.c    Thu Dec  6 
04:04:13 2007
@@ -446,8 +446,15 @@
     if ((cspace_login_arg_avail(r)) && (r->method_number == M_POST)) {
         if (cspace_read_request(r, &buf, &ret)) {
             /*TODO:DONE xmlToken can be different! yet another config option*/
-            if ((buf) && (ap_strstr(buf, dir_cfg->xml_token))) {
+            if ((buf) && (buf = ap_strstr(buf, dir_cfg->xml_token))) {
                 int state = FAIL;
+               char *tmp = buf;
+       
+               /*remove any trailing params*/  
+               while (*tmp && *tmp != '&') {
+                   tmp++;
+               }
+               *tmp = '\0';
 
                 cspace_decode_url((char *)buf);
                 
@@ -495,10 +502,18 @@
         if (cspace_read_request(r, &buf, &ret)) {
             
             /*TODO: xmlToken can be different! yet another config option*/
-            if ((buf) && (ap_strstr(buf, dir_cfg->xml_token))) {
+            if ((buf) && (buf = ap_strstr(buf, dir_cfg->xml_token))) {
                 int state = FAIL;
 
-                cspace_decode_url((char *)buf);
+                char *tmp = buf;
+       
+               /*remove any trailing params*/  
+               while (*tmp && *tmp != '&') {
+                   tmp++;
+               }
+               *tmp = '\0';
+
+               cspace_decode_url((char *)buf);
 
                 state = process_token(buf, r, svr_cfg);
 

_______________________________________________
Identity-dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/identity-dev

Reply via email to