This is an automated email from the ASF dual-hosted git repository. artnaseef pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/activemq.git
The following commit(s) were added to refs/heads/master by this push: new 4450c17 Properly encode the copy/move message URL. 4450c17 is described below commit 4450c17c1c836a1daa7541dcb944f35798258197 Author: artnaseef <artnas...@apache.org> AuthorDate: Mon Aug 31 09:48:13 2020 -0700 Properly encode the copy/move message URL. --- activemq-web-console/src/main/webapp/message.jsp | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/activemq-web-console/src/main/webapp/message.jsp b/activemq-web-console/src/main/webapp/message.jsp index 262dc5e..132d596 100644 --- a/activemq-web-console/src/main/webapp/message.jsp +++ b/activemq-web-console/src/main/webapp/message.jsp @@ -234,9 +234,17 @@ function confirmAction(id, action) { return; } var value = select.options[selectedIndex].value; - var url = action + ".action?destination=" + value; - url += "&JMSDestination=${requestContext.messageQuery.JMSDestination}"; - url += "&messageId=${row.JMSMessageID}&JMSDestinationType=queue&secret=${sessionScope['secret']}"; + var url = action + ".action?destination=" + encodeURIComponent(value); + + var url = action + + "<c:url value=".action"> + <c:param name="JMSDestination" value="${requestContext.messageQuery.JMSDestination}" /> + <c:param name="messageId" value="${row.JMSMessageID}" /> + <c:param name="JMSDestinationType" value="queue" /> + <c:param name="secret" value='${sessionScope["secret"]}' /> + </c:url>"; + url = url + "&destination=" + encodeURIComponent(value); + if (confirm("Are you sure?")) location.href=url; }