From 4da0d94b96e662b8dffe281d0a2de812f11cda71 Mon Sep 17 00:00:00 2001 From: Jacek Kowalski <Jacek@jacekk.info> Date: Sun, 10 May 2020 20:40:15 +0000 Subject: [PATCH] Filter potentially dangerous input in GitHub Actions workflows --- src/main/java/org/keycloak/protocol/cas/utils/AttributesMapAdapter.java | 9 +++++---- 1 files changed, 5 insertions(+), 4 deletions(-) diff --git a/src/main/java/org/keycloak/protocol/cas/utils/AttributesMapAdapter.java b/src/main/java/org/keycloak/protocol/cas/utils/AttributesMapAdapter.java index bf9b148..8afc07b 100644 --- a/src/main/java/org/keycloak/protocol/cas/utils/AttributesMapAdapter.java +++ b/src/main/java/org/keycloak/protocol/cas/utils/AttributesMapAdapter.java @@ -1,6 +1,6 @@ package org.keycloak.protocol.cas.utils; -import org.keycloak.protocol.cas.representations.CasServiceResponse; +import org.keycloak.protocol.cas.representations.CASServiceResponse; import javax.xml.bind.JAXBElement; import javax.xml.bind.annotation.XmlAccessType; @@ -10,6 +10,7 @@ import javax.xml.bind.annotation.adapters.XmlAdapter; import javax.xml.namespace.QName; import java.util.ArrayList; +import java.util.Collection; import java.util.List; import java.util.Map; @@ -37,8 +38,8 @@ AttributeWrapperType(Map<String, Object> attributes) { this.elements = new ArrayList<>(); for (Map.Entry<String, Object> entry : attributes.entrySet()) { - if (entry.getValue() instanceof List) { - for (Object item : ((List) entry.getValue())) { + if (entry.getValue() instanceof Collection) { + for (Object item : ((Collection) entry.getValue())) { addElement(entry.getKey(), item); } } else { @@ -49,7 +50,7 @@ private void addElement(String name, Object value) { if (value != null) { - String namespace = CasServiceResponse.class.getPackage().getAnnotation(XmlSchema.class).namespace(); + String namespace = CASServiceResponse.class.getPackage().getAnnotation(XmlSchema.class).namespace(); elements.add(new JAXBElement<>(new QName(namespace, name), String.class, value.toString())); } } -- Gitblit v1.9.1