From d7fe73b62d5c549e52d013b958b19eda43b6db4c Mon Sep 17 00:00:00 2001
From: Michael Simon <simon@kit.edu>
Date: Tue, 15 Oct 2024 09:20:20 +0200
Subject: [PATCH] NO_STORY do not escape error message for access check
---
bwreg-webapp/src/main/webapp/user/oidc-access-denied.xhtml | 4 ++--
bwreg-webapp/src/main/webapp/user/saml-access-denied.xhtml | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/bwreg-webapp/src/main/webapp/user/oidc-access-denied.xhtml b/bwreg-webapp/src/main/webapp/user/oidc-access-denied.xhtml
index 7b78888c1..bdfd5c3ae 100644
--- a/bwreg-webapp/src/main/webapp/user/oidc-access-denied.xhtml
+++ b/bwreg-webapp/src/main/webapp/user/oidc-access-denied.xhtml
@@ -30,14 +30,14 @@
<div style="margin-top: 4px;">
<h:outputText value="#{messages.requirements_unsatisfied}" />
</div>
- <p:messages id="messageBoxReqs" for="reqs" showDetail="true" />
+ <p:messages id="messageBoxReqs" for="reqs" showDetail="true" escape="false" />
</p:panel>
<p:panel header="#{messages.access_check}: #{oidcAccessDeniedBean.serviceOidcClient.clientConfig.displayName}" rendered="#{not oidcAccessDeniedBean.accessProblem}"
styleClass="text full">
<div style="margin-top: 4px;">
<h:outputText value="#{messages.requirements_met}" />
</div>
- <p:messages id="messageBoxReqsMet" for="reqs" showDetail="true" />
+ <p:messages id="messageBoxReqsMet" for="reqs" showDetail="true" escape="false" />
</p:panel>
</ui:define>
diff --git a/bwreg-webapp/src/main/webapp/user/saml-access-denied.xhtml b/bwreg-webapp/src/main/webapp/user/saml-access-denied.xhtml
index 408e03df2..13ee0944b 100644
--- a/bwreg-webapp/src/main/webapp/user/saml-access-denied.xhtml
+++ b/bwreg-webapp/src/main/webapp/user/saml-access-denied.xhtml
@@ -30,14 +30,14 @@
<div style="margin-top: 4px;">
<h:outputText value="#{messages.requirements_unsatisfied}" />
</div>
- <p:messages id="messageBoxReqs" for="reqs" showDetail="true" />
+ <p:messages id="messageBoxReqs" for="reqs" showDetail="true" escape="false" />
</p:panel>
<p:panel header="#{messages.access_check}: #{samlAccessDeniedBean.serviceSamlSpEntity.sp.displayName}" rendered="#{not samlAccessDeniedBean.accessProblem}"
styleClass="text full">
<div style="margin-top: 4px;">
<h:outputText value="#{messages.requirements_met}" />
</div>
- <p:messages id="messageBoxReqsMet" for="reqs" showDetail="true" />
+ <p:messages id="messageBoxReqsMet" for="reqs" showDetail="true" escape="false" />
</p:panel>
</ui:define>
--
GitLab