Merged #164 "Sanitize page parameters for XSS vulerabilities"

James Moger

2014-09-07 f9c661ef5d2a422f246b3a089bee06470ae1d431

 src/main/java/com/gitblit/tickets/QueryBuilder.java

@@ -201,6 +201,12 @@
            q = q.substring(1, q.length() - 1);
         }
      }
      if (q.startsWith("AND ")) {
         q = q.substring(3).trim();
      }
      if (q.startsWith("OR ")) {
         q = q.substring(2).trim();
      }
      return q;
   }