Skip to main content
summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGreg Wilkins2009-04-21 04:34:48 +0000
committerGreg Wilkins2009-04-21 04:34:48 +0000
commit59a80ea0179cb5b1483611093182250bec540b8d (patch)
tree9f7904a83f34a815a3b782746c59f1c2e2f54671 /jetty-security
parent17250b81c0397645dc53e4ae3a4fbe2e54604119 (diff)
downloadorg.eclipse.jetty.project-59a80ea0179cb5b1483611093182250bec540b8d.tar.gz
org.eclipse.jetty.project-59a80ea0179cb5b1483611093182250bec540b8d.tar.xz
org.eclipse.jetty.project-59a80ea0179cb5b1483611093182250bec540b8d.zip
273011 XSS in directory listing
git-svn-id: svn+ssh://dev.eclipse.org/svnroot/rt/org.eclipse.jetty/jetty/trunk@166 7e9141cc-0065-0410-87d8-b60c137991c4
Diffstat (limited to 'jetty-security')
-rw-r--r--jetty-security/src/main/java/org/eclipse/jetty/security/IdentityService.java7
1 files changed, 5 insertions, 2 deletions
diff --git a/jetty-security/src/main/java/org/eclipse/jetty/security/IdentityService.java b/jetty-security/src/main/java/org/eclipse/jetty/security/IdentityService.java
index 7cea4225a1..00d908c413 100644
--- a/jetty-security/src/main/java/org/eclipse/jetty/security/IdentityService.java
+++ b/jetty-security/src/main/java/org/eclipse/jetty/security/IdentityService.java
@@ -30,8 +30,11 @@ public interface IdentityService
/* ------------------------------------------------------------ */
/**
- * Scope the {@link UserIdentity} to a {@link UserIdentity.Scope}.
- * @param user The current user or null for no user associated.
+ * Associate a user identity with the current thread.
+ * This is called with as a thread enters the
+ * {@link SecurityHandler#handle(String, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)}
+ * method and then again with a null argument as that call exits.
+ * @param user The current user or null for no user to associated.
*/
void associate(UserIdentity user);

Back to the top