Revision: 650
http://stripes.svn.sourceforge.net/stripes/?rev=650&view=rev
Author: bengunter
Date: 2007-12-06 21:24:53 -0800 (Thu, 06 Dec 2007)
Log Message:
-----------
Fixed STS-450: Encrypted values should be URL-safe. Values are now encoded and
decoded using the new Base64.URL_SAFE option.
Modified Paths:
--------------
trunk/stripes/src/net/sourceforge/stripes/util/CryptoUtil.java
Modified: trunk/stripes/src/net/sourceforge/stripes/util/CryptoUtil.java
===================================================================
--- trunk/stripes/src/net/sourceforge/stripes/util/CryptoUtil.java
2007-12-07 05:19:25 UTC (rev 649)
+++ trunk/stripes/src/net/sourceforge/stripes/util/CryptoUtil.java
2007-12-07 05:24:53 UTC (rev 650)
@@ -62,7 +62,7 @@
byte[] output = cipher.doFinal(input.getBytes());
// Then base64 encode the bytes
- return Base64.encodeBytes(output);
+ return Base64.encodeBytes(output, Base64.URL_SAFE);
}
catch (Exception e) {
throw new StripesRuntimeException("Could not encrypt value.", e);
@@ -85,7 +85,7 @@
if (input == null) return null;
// First un-base64 the String
- byte[] bytes = Base64.decode(input);
+ byte[] bytes = Base64.decode(input, Base64.URL_SAFE);
// Then fetch a cipher and decrypt the bytes
Cipher cipher = getCipher(request, Cipher.DECRYPT_MODE);
This was sent by the SourceForge.net collaborative development platform, the
world's largest Open Source development site.
-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Stripes-development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-development
