Merge pull request wso2#5719 from asha15/encodeCallbackurl

brionmario · Mar 14, 2024 · 5a34be3 · 5a34be3
2 parents 1bd99ac + 7e8e8a1
commit 5a34be3
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/...core/apps/recovery-portal/src/main/webapp/self-registration-with-verification-confirm.jsp b/...core/apps/recovery-portal/src/main/webapp/self-registration-with-verification-confirm.jsp
@@ -39,6 +39,7 @@
 <%@ page import="org.wso2.carbon.identity.mgt.endpoint.util.client.model.User" %>
 <%@ page import="org.wso2.carbon.identity.recovery.util.Utils" %>
 <%@ page import="org.wso2.carbon.core.util.SignatureUtil" %>
+<%@ page import="org.owasp.encoder.Encode" %>
 <%@ page import="javax.servlet.http.Cookie" %>
 <%@ page import="java.util.Base64" %>
 <%@ page import="org.wso2.carbon.identity.mgt.endpoint.util.client.PreferenceRetrievalClientException" %>
@@ -59,7 +60,7 @@
     String applicationAccessUrl = "";
 
     String confirmationKey = request.getParameter("confirmation");
-    String callback = request.getParameter("callback");
+    String callback = Encode.forJava(request.getParameter("callback"));
     String httpMethod = request.getMethod();
     String sp = Encode.forJava(request.getParameter("sp"));
     PreferenceRetrievalClient preferenceRetrievalClient = new PreferenceRetrievalClient();