Author: chris.laprun(a)jboss.com Date: 2009-02-24 17:39:05 -0500 (Tue, 24 Feb 2009) New Revision: 12890 Modified: branches/JBoss_Portal_Branch_2_7/core-cms/src/main/org/jboss/portal/core/cms/ui/admin/CMSAdminPortlet.java Log: - Should probably use the XSS detection regexp from ParameterValidation as it will probably evolve and be better tested. Modified: branches/JBoss_Portal_Branch_2_7/core-cms/src/main/org/jboss/portal/core/cms/ui/admin/CMSAdminPortlet.java =================================================================== --- branches/JBoss_Portal_Branch_2_7/core-cms/src/main/org/jboss/portal/core/cms/ui/admin/CMSAdminPortlet.java 2009-02-24 18:24:42 UTC (rev 12889) +++ branches/JBoss_Portal_Branch_2_7/core-cms/src/main/org/jboss/portal/core/cms/ui/admin/CMSAdminPortlet.java 2009-02-24 22:39:05 UTC (rev 12890) @@ -107,7 +107,7 @@ private ApprovePublish approvePublish; private AuthorizationManager authorizationManager; private ResourceBundle resources = null; - private static final Pattern CHECK_FOR_XSS_PATTERN = Pattern.compile("[^<>\\(\\)=]*"); + private static final Pattern CHECK_FOR_XSS_PATTERN = ParameterValidation.XSS_CHECK; private static final String SLASH = "/";