diff options
author | Greg Wilkins | 2009-04-21 04:34:48 +0000 |
---|---|---|
committer | Greg Wilkins | 2009-04-21 04:34:48 +0000 |
commit | 59a80ea0179cb5b1483611093182250bec540b8d (patch) | |
tree | 9f7904a83f34a815a3b782746c59f1c2e2f54671 /jetty-security | |
parent | 17250b81c0397645dc53e4ae3a4fbe2e54604119 (diff) | |
download | org.eclipse.jetty.project-59a80ea0179cb5b1483611093182250bec540b8d.tar.gz org.eclipse.jetty.project-59a80ea0179cb5b1483611093182250bec540b8d.tar.xz org.eclipse.jetty.project-59a80ea0179cb5b1483611093182250bec540b8d.zip |
273011 XSS in directory listing
git-svn-id: svn+ssh://dev.eclipse.org/svnroot/rt/org.eclipse.jetty/jetty/trunk@166 7e9141cc-0065-0410-87d8-b60c137991c4
Diffstat (limited to 'jetty-security')
-rw-r--r-- | jetty-security/src/main/java/org/eclipse/jetty/security/IdentityService.java | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/jetty-security/src/main/java/org/eclipse/jetty/security/IdentityService.java b/jetty-security/src/main/java/org/eclipse/jetty/security/IdentityService.java index 7cea4225a1..00d908c413 100644 --- a/jetty-security/src/main/java/org/eclipse/jetty/security/IdentityService.java +++ b/jetty-security/src/main/java/org/eclipse/jetty/security/IdentityService.java @@ -30,8 +30,11 @@ public interface IdentityService /* ------------------------------------------------------------ */ /** - * Scope the {@link UserIdentity} to a {@link UserIdentity.Scope}. - * @param user The current user or null for no user associated. + * Associate a user identity with the current thread. + * This is called with as a thread enters the + * {@link SecurityHandler#handle(String, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)} + * method and then again with a null argument as that call exits. + * @param user The current user or null for no user to associated. */ void associate(UserIdentity user); |