jackrabbit-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From mreut...@apache.org
Subject svn commit: r1496392 - in /jackrabbit/site: live/api/1.3/ live/api/1.4/ live/api/1.4/ocm/ live/api/1.5/ live/api/1.6/ live/api/2.0/ live/api/2.1/ live/api/2.2/ live/api/2.4/ trunk/content/api/1.3/ trunk/content/api/1.4/ trunk/content/api/1.4/ocm/ trunk...
Date Tue, 25 Jun 2013 09:37:11 GMT
Author: mreutegg
Date: Tue Jun 25 09:37:10 2013
New Revision: 1496392

URL: http://svn.apache.org/r1496392
Log:
JCRSITE-41: Oracle Javadoc HTML frame injection vulnerability

Modified:
    jackrabbit/site/live/api/1.3/index.html
    jackrabbit/site/live/api/1.4/index.html
    jackrabbit/site/live/api/1.4/ocm/index.html
    jackrabbit/site/live/api/1.5/index.html
    jackrabbit/site/live/api/1.6/index.html
    jackrabbit/site/live/api/2.0/index.html
    jackrabbit/site/live/api/2.1/index.html
    jackrabbit/site/live/api/2.2/index.html
    jackrabbit/site/live/api/2.4/index.html
    jackrabbit/site/trunk/content/api/1.3/index.html
    jackrabbit/site/trunk/content/api/1.4/index.html
    jackrabbit/site/trunk/content/api/1.4/ocm/index.html
    jackrabbit/site/trunk/content/api/1.5/index.html
    jackrabbit/site/trunk/content/api/1.6/index.html
    jackrabbit/site/trunk/content/api/2.0/index.html
    jackrabbit/site/trunk/content/api/2.1/index.html
    jackrabbit/site/trunk/content/api/2.2/index.html
    jackrabbit/site/trunk/content/api/2.4/index.html

Modified: jackrabbit/site/live/api/1.3/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/api/1.3/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/live/api/1.3/index.html (original)
+++ jackrabbit/site/live/api/1.3/index.html Tue Jun 25 09:37:10 2013
@@ -11,6 +11,42 @@ Apache Jackrabbit 1.3 API
     targetPage = "" + window.location.search;
     if (targetPage != "" && targetPage != "undefined")
        targetPage = targetPage.substring(1);
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/live/api/1.4/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/api/1.4/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/live/api/1.4/index.html (original)
+++ jackrabbit/site/live/api/1.4/index.html Tue Jun 25 09:37:10 2013
@@ -11,6 +11,42 @@ Apache Jackrabbit 1.4 API
     targetPage = "" + window.location.search;
     if (targetPage != "" && targetPage != "undefined")
        targetPage = targetPage.substring(1);
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/live/api/1.4/ocm/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/api/1.4/ocm/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/live/api/1.4/ocm/index.html (original)
+++ jackrabbit/site/live/api/1.4/ocm/index.html Tue Jun 25 09:37:10 2013
@@ -11,6 +11,42 @@ Apache Jackrabbit 1.4 API
     targetPage = "" + window.location.search;
     if (targetPage != "" && targetPage != "undefined")
        targetPage = targetPage.substring(1);
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/live/api/1.5/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/api/1.5/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/live/api/1.5/index.html (original)
+++ jackrabbit/site/live/api/1.5/index.html Tue Jun 25 09:37:10 2013
@@ -13,6 +13,42 @@ Apache Jackrabbit 1.5.0 API
         targetPage = targetPage.substring(1);
     if (targetPage.indexOf(":") != -1)
         targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/live/api/1.6/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/api/1.6/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/live/api/1.6/index.html (original)
+++ jackrabbit/site/live/api/1.6/index.html Tue Jun 25 09:37:10 2013
@@ -13,6 +13,42 @@ Apache Jackrabbit 1.6.0 API
         targetPage = targetPage.substring(1);
     if (targetPage.indexOf(":") != -1)
         targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/live/api/2.0/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/api/2.0/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/live/api/2.0/index.html (original)
+++ jackrabbit/site/live/api/2.0/index.html Tue Jun 25 09:37:10 2013
@@ -13,6 +13,42 @@ Apache Jackrabbit 2.0.0 API
         targetPage = targetPage.substring(1);
     if (targetPage.indexOf(":") != -1)
         targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/live/api/2.1/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/api/2.1/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/live/api/2.1/index.html (original)
+++ jackrabbit/site/live/api/2.1/index.html Tue Jun 25 09:37:10 2013
@@ -13,6 +13,42 @@ Apache Jackrabbit 2.1.0 API
         targetPage = targetPage.substring(1);
     if (targetPage.indexOf(":") != -1)
         targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/live/api/2.2/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/api/2.2/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/live/api/2.2/index.html (original)
+++ jackrabbit/site/live/api/2.2/index.html Tue Jun 25 09:37:10 2013
@@ -13,6 +13,42 @@ Apache Jackrabbit 2.2.0 API
         targetPage = targetPage.substring(1);
     if (targetPage.indexOf(":") != -1)
         targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/live/api/2.4/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/api/2.4/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/live/api/2.4/index.html (original)
+++ jackrabbit/site/live/api/2.4/index.html Tue Jun 25 09:37:10 2013
@@ -1,34 +1,70 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
-<!-- NewPage -->
-<html lang="en">
-<head>
-<!-- Generated by javadoc on Tue Feb 21 16:02:18 CET 2012 -->
-<meta http-equiv="Content-Type" content="text/html" charset="UTF-8">
-<title>Apache Jackrabbit 2.4.0 API</title>
-<script type="text/javascript">
-    targetPage = "" + window.location.search;
-    if (targetPage != "" && targetPage != "undefined")
-        targetPage = targetPage.substring(1);
-    if (targetPage.indexOf(":") != -1)
-        targetPage = "undefined";
-    function loadFrames() {
-        if (targetPage != "" && targetPage != "undefined")
-             top.classFrame.location = top.targetPage;
-    }
-</script>
-</head>
-<frameset cols="20%,80%" title="Documentation frame" onload="top.loadFrames()">
-<frameset rows="30%,70%" title="Left frames" onload="top.loadFrames()">
-<frame src="overview-frame.html" name="packageListFrame" title="All Packages">
-<frame src="allclasses-frame.html" name="packageFrame" title="All classes and interfaces
(except non-static nested types)">
-</frameset>
-<frame src="overview-summary.html" name="classFrame" title="Package, class and interface
descriptions" scrolling="yes">
-<noframes>
-<noscript>
-<div>JavaScript is disabled on your browser.</div>
-</noscript>
-<h2>Frame Alert</h2>
-<p>This document is designed to be viewed using the frames feature. If you see this
message, you are using a non-frame-capable web client. Link to <a href="overview-summary.html">Non-frame
version</a>.</p>
-</noframes>
-</frameset>
-</html>
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
+<!-- NewPage -->
+<html lang="en">
+<head>
+<!-- Generated by javadoc on Tue Feb 21 16:02:18 CET 2012 -->
+<meta http-equiv="Content-Type" content="text/html" charset="UTF-8">
+<title>Apache Jackrabbit 2.4.0 API</title>
+<script type="text/javascript">
+    targetPage = "" + window.location.search;
+    if (targetPage != "" && targetPage != "undefined")
+        targetPage = targetPage.substring(1);
+    if (targetPage.indexOf(":") != -1)
+        targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
+    function loadFrames() {
+        if (targetPage != "" && targetPage != "undefined")
+             top.classFrame.location = top.targetPage;
+    }
+</script>
+</head>
+<frameset cols="20%,80%" title="Documentation frame" onload="top.loadFrames()">
+<frameset rows="30%,70%" title="Left frames" onload="top.loadFrames()">
+<frame src="overview-frame.html" name="packageListFrame" title="All Packages">
+<frame src="allclasses-frame.html" name="packageFrame" title="All classes and interfaces
(except non-static nested types)">
+</frameset>
+<frame src="overview-summary.html" name="classFrame" title="Package, class and interface
descriptions" scrolling="yes">
+<noframes>
+<noscript>
+<div>JavaScript is disabled on your browser.</div>
+</noscript>
+<h2>Frame Alert</h2>
+<p>This document is designed to be viewed using the frames feature. If you see this
message, you are using a non-frame-capable web client. Link to <a href="overview-summary.html">Non-frame
version</a>.</p>
+</noframes>
+</frameset>
+</html>

Modified: jackrabbit/site/trunk/content/api/1.3/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/trunk/content/api/1.3/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/trunk/content/api/1.3/index.html (original)
+++ jackrabbit/site/trunk/content/api/1.3/index.html Tue Jun 25 09:37:10 2013
@@ -11,6 +11,42 @@ Apache Jackrabbit 1.3 API
     targetPage = "" + window.location.search;
     if (targetPage != "" && targetPage != "undefined")
        targetPage = targetPage.substring(1);
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/trunk/content/api/1.4/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/trunk/content/api/1.4/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/trunk/content/api/1.4/index.html (original)
+++ jackrabbit/site/trunk/content/api/1.4/index.html Tue Jun 25 09:37:10 2013
@@ -11,6 +11,42 @@ Apache Jackrabbit 1.4 API
     targetPage = "" + window.location.search;
     if (targetPage != "" && targetPage != "undefined")
        targetPage = targetPage.substring(1);
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/trunk/content/api/1.4/ocm/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/trunk/content/api/1.4/ocm/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/trunk/content/api/1.4/ocm/index.html (original)
+++ jackrabbit/site/trunk/content/api/1.4/ocm/index.html Tue Jun 25 09:37:10 2013
@@ -11,6 +11,42 @@ Apache Jackrabbit 1.4 API
     targetPage = "" + window.location.search;
     if (targetPage != "" && targetPage != "undefined")
        targetPage = targetPage.substring(1);
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/trunk/content/api/1.5/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/trunk/content/api/1.5/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/trunk/content/api/1.5/index.html (original)
+++ jackrabbit/site/trunk/content/api/1.5/index.html Tue Jun 25 09:37:10 2013
@@ -13,6 +13,42 @@ Apache Jackrabbit 1.5.0 API
         targetPage = targetPage.substring(1);
     if (targetPage.indexOf(":") != -1)
         targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/trunk/content/api/1.6/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/trunk/content/api/1.6/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/trunk/content/api/1.6/index.html (original)
+++ jackrabbit/site/trunk/content/api/1.6/index.html Tue Jun 25 09:37:10 2013
@@ -13,6 +13,42 @@ Apache Jackrabbit 1.6.0 API
         targetPage = targetPage.substring(1);
     if (targetPage.indexOf(":") != -1)
         targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/trunk/content/api/2.0/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/trunk/content/api/2.0/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/trunk/content/api/2.0/index.html (original)
+++ jackrabbit/site/trunk/content/api/2.0/index.html Tue Jun 25 09:37:10 2013
@@ -13,6 +13,42 @@ Apache Jackrabbit 2.0.0 API
         targetPage = targetPage.substring(1);
     if (targetPage.indexOf(":") != -1)
         targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/trunk/content/api/2.1/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/trunk/content/api/2.1/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/trunk/content/api/2.1/index.html (original)
+++ jackrabbit/site/trunk/content/api/2.1/index.html Tue Jun 25 09:37:10 2013
@@ -13,6 +13,42 @@ Apache Jackrabbit 2.1.0 API
         targetPage = targetPage.substring(1);
     if (targetPage.indexOf(":") != -1)
         targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/trunk/content/api/2.2/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/trunk/content/api/2.2/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/trunk/content/api/2.2/index.html (original)
+++ jackrabbit/site/trunk/content/api/2.2/index.html Tue Jun 25 09:37:10 2013
@@ -13,6 +13,42 @@ Apache Jackrabbit 2.2.0 API
         targetPage = targetPage.substring(1);
     if (targetPage.indexOf(":") != -1)
         targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;

Modified: jackrabbit/site/trunk/content/api/2.4/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/trunk/content/api/2.4/index.html?rev=1496392&r1=1496391&r2=1496392&view=diff
==============================================================================
--- jackrabbit/site/trunk/content/api/2.4/index.html (original)
+++ jackrabbit/site/trunk/content/api/2.4/index.html Tue Jun 25 09:37:10 2013
@@ -1,34 +1,70 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
-<!-- NewPage -->
-<html lang="en">
-<head>
-<!-- Generated by javadoc on Tue Feb 21 16:02:18 CET 2012 -->
-<meta http-equiv="Content-Type" content="text/html" charset="UTF-8">
-<title>Apache Jackrabbit 2.4.0 API</title>
-<script type="text/javascript">
-    targetPage = "" + window.location.search;
-    if (targetPage != "" && targetPage != "undefined")
-        targetPage = targetPage.substring(1);
-    if (targetPage.indexOf(":") != -1)
-        targetPage = "undefined";
-    function loadFrames() {
-        if (targetPage != "" && targetPage != "undefined")
-             top.classFrame.location = top.targetPage;
-    }
-</script>
-</head>
-<frameset cols="20%,80%" title="Documentation frame" onload="top.loadFrames()">
-<frameset rows="30%,70%" title="Left frames" onload="top.loadFrames()">
-<frame src="overview-frame.html" name="packageListFrame" title="All Packages">
-<frame src="allclasses-frame.html" name="packageFrame" title="All classes and interfaces
(except non-static nested types)">
-</frameset>
-<frame src="overview-summary.html" name="classFrame" title="Package, class and interface
descriptions" scrolling="yes">
-<noframes>
-<noscript>
-<div>JavaScript is disabled on your browser.</div>
-</noscript>
-<h2>Frame Alert</h2>
-<p>This document is designed to be viewed using the frames feature. If you see this
message, you are using a non-frame-capable web client. Link to <a href="overview-summary.html">Non-frame
version</a>.</p>
-</noframes>
-</frameset>
-</html>
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
+<!-- NewPage -->
+<html lang="en">
+<head>
+<!-- Generated by javadoc on Tue Feb 21 16:02:18 CET 2012 -->
+<meta http-equiv="Content-Type" content="text/html" charset="UTF-8">
+<title>Apache Jackrabbit 2.4.0 API</title>
+<script type="text/javascript">
+    targetPage = "" + window.location.search;
+    if (targetPage != "" && targetPage != "undefined")
+        targetPage = targetPage.substring(1);
+    if (targetPage.indexOf(":") != -1)
+        targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
+    function loadFrames() {
+        if (targetPage != "" && targetPage != "undefined")
+             top.classFrame.location = top.targetPage;
+    }
+</script>
+</head>
+<frameset cols="20%,80%" title="Documentation frame" onload="top.loadFrames()">
+<frameset rows="30%,70%" title="Left frames" onload="top.loadFrames()">
+<frame src="overview-frame.html" name="packageListFrame" title="All Packages">
+<frame src="allclasses-frame.html" name="packageFrame" title="All classes and interfaces
(except non-static nested types)">
+</frameset>
+<frame src="overview-summary.html" name="classFrame" title="Package, class and interface
descriptions" scrolling="yes">
+<noframes>
+<noscript>
+<div>JavaScript is disabled on your browser.</div>
+</noscript>
+<h2>Frame Alert</h2>
+<p>This document is designed to be viewed using the frames feature. If you see this
message, you are using a non-frame-capable web client. Link to <a href="overview-summary.html">Non-frame
version</a>.</p>
+</noframes>
+</frameset>
+</html>



Mime
View raw message