litvinovg/vitro
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[VIVO-1404] Disable XSS protection on the SPARQL query page

Browse source
This commit is contained in:
Graham Triggs 2017-11-10 12:01:23 -05:00
parent f4c9d23af0
commit 0e15b9a69a
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
api/src/main/java/edu/cornell/mannlib/vitro/webapp/controller/admin/SparqlQueryController.java
View file

@ -96,6 +96,7 @@ public class SparqlQueryController extends FreemarkerHttpServlet {
SimplePermission.USE_SPARQL_QUERY_PAGE.ACTION)) {
return;
}
resp.addHeader("X-XSS-Protection", "0");
if (req.getParameterMap().containsKey("query")) {
respondToQuery(req, resp);
} else {