Profile2 builds path to skin CSS in an unsafe way

Description

in the file impl/src/java/org/sakaiproject/profile2/logic/SakaiProxyImpl.java, the "skin.default" property is fetched and used directly to build a path to tool.css which may not be correct since the portal uses new rules for building skin paths in 2.9.

Activity

Show:

Sam Ottenhoff April 29, 2013 at 11:47 AM

1.5.x: r123359

Charles R Severance March 24, 2013 at 10:05 AM

Like

Steve Swinsburg March 24, 2013 at 5:35 AM

Removed the API references to the skin.default and skin.repo, since they are unnecessary.
Changed the BasePage to get the sakai.html.head attribute directly from the request and shove it into the header.
Looks normal.

r121694

Fixed

Details

Priority

Fix versions

Components

Assignee

Reporter

Created March 22, 2013 at 7:54 AM
Updated July 15, 2014 at 7:11 AM
Resolved March 24, 2013 at 5:35 AM

Flag notifications