Deprecated: The each() function is deprecated. This message will be suppressed on further calls in /home/zhenxiangba/zhenxiangba.com/public_html/phproxy-improved-master/index.php on line 456
Re: Oracle Portal 10g HTTP Response Splitting
[go: Go Back, main page]


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Oracle Portal 10g HTTP Response Splitting



This also occurs in Portal 9.0.2 in the file calendar.jsp, calendarDialog.jsp, 
and fred.jsp, all of which are under the $ORACLE_HOME/j2ee directory in various 
locations.  The offending code is 
  String enc = request.getParameter("enc");
  if ((enc == null) || "".equals(enc))
    response.setContentType("text/html");
  else
   response.setContentType("text/html;charset=" + enc);

which can be commented out as follows:

//  String enc = request.getParameter("enc");
//  if ((enc == null) || "".equals(enc))
    response.setContentType("text/html");
//  else
//    response.setContentType("text/html;charset=" + enc);