From 4da0d94b96e662b8dffe281d0a2de812f11cda71 Mon Sep 17 00:00:00 2001
From: Jacek Kowalski <Jacek@jacekk.info>
Date: Sun, 10 May 2020 20:40:15 +0000
Subject: [PATCH] Filter potentially dangerous input in GitHub Actions workflows

---
 src/main/java/org/keycloak/protocol/cas/utils/AttributesMapAdapter.java |    9 +++++----
 1 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/src/main/java/org/keycloak/protocol/cas/utils/AttributesMapAdapter.java b/src/main/java/org/keycloak/protocol/cas/utils/AttributesMapAdapter.java
index bf9b148..8afc07b 100644
--- a/src/main/java/org/keycloak/protocol/cas/utils/AttributesMapAdapter.java
+++ b/src/main/java/org/keycloak/protocol/cas/utils/AttributesMapAdapter.java
@@ -1,6 +1,6 @@
 package org.keycloak.protocol.cas.utils;
 
-import org.keycloak.protocol.cas.representations.CasServiceResponse;
+import org.keycloak.protocol.cas.representations.CASServiceResponse;
 
 import javax.xml.bind.JAXBElement;
 import javax.xml.bind.annotation.XmlAccessType;
@@ -10,6 +10,7 @@
 import javax.xml.bind.annotation.adapters.XmlAdapter;
 import javax.xml.namespace.QName;
 import java.util.ArrayList;
+import java.util.Collection;
 import java.util.List;
 import java.util.Map;
 
@@ -37,8 +38,8 @@
         AttributeWrapperType(Map<String, Object> attributes) {
             this.elements = new ArrayList<>();
             for (Map.Entry<String, Object> entry : attributes.entrySet()) {
-                if (entry.getValue() instanceof List) {
-                    for (Object item : ((List) entry.getValue())) {
+                if (entry.getValue() instanceof Collection) {
+                    for (Object item : ((Collection) entry.getValue())) {
                         addElement(entry.getKey(), item);
                     }
                 } else {
@@ -49,7 +50,7 @@
 
         private void addElement(String name, Object value) {
             if (value != null) {
-                String namespace = CasServiceResponse.class.getPackage().getAnnotation(XmlSchema.class).namespace();
+                String namespace = CASServiceResponse.class.getPackage().getAnnotation(XmlSchema.class).namespace();
                 elements.add(new JAXBElement<>(new QName(namespace, name), String.class, value.toString()));
             }
         }

--
Gitblit v1.9.1