首頁 探索 說明
註冊 登入
github
/
spring-security
镜像来自 https://github.com/spring-projects/spring-security
2
0
複刻 0
檔案 問題管理 0 Wiki
瀏覽代碼

Move script tag into body element

Closes gh-11879
Marcus Da Coregio 2 年之前
父節點
9564f1b5e4
當前提交
0c96989cbe
共有 3 個文件被更改，包括 5 次插入 和 5 次删除
分割檢視 顯示文件統計
  1. 1 1
      saml2/saml2-service-provider/src/main/java/org/springframework/security/saml2/provider/service/servlet/filter/Saml2WebSsoAuthenticationRequestFilter.java
  2. 2 2
      saml2/saml2-service-provider/src/main/java/org/springframework/security/saml2/provider/service/web/authentication/logout/Saml2LogoutRequestFilter.java
  3. 2 2
      saml2/saml2-service-provider/src/main/java/org/springframework/security/saml2/provider/service/web/authentication/logout/Saml2RelyingPartyInitiatedLogoutSuccessHandler.java

+ 1 - 1
saml2/saml2-service-provider/src/main/java/org/springframework/security/saml2/provider/service/servlet/filter/Saml2WebSsoAuthenticationRequestFilter.java
查看文件 

@@ -268,8 +268,8 @@ public class Saml2WebSsoAuthenticationRequestFilter extends OncePerRequestFilter
 
 		html.append("            </noscript>\n");
 
 		html.append("        </form>\n");
 
 		html.append("        \n");
 
+		html.append("        <script>window.onload = () => document.forms[0].submit();</script>\n");
 
 		html.append("    </body>\n");
 
-		html.append("    <script>window.onload = () => document.forms[0].submit();</script>\n");
 
 		html.append("</html>");
 
 		return html.toString();
 
 	}

+ 2 - 2
saml2/saml2-service-provider/src/main/java/org/springframework/security/saml2/provider/service/web/authentication/logout/Saml2LogoutRequestFilter.java
查看文件 

@@ -219,7 +219,7 @@ public final class Saml2LogoutRequestFilter extends OncePerRequestFilter {
 
 				.append("content=\"script-src 'sha256-t+jmhLjs1ocvgaHBJsFcgznRk68d37TLtbI3NE9h7EU='\">\n");
 
 		html.append("        <meta charset=\"utf-8\" />\n");
 
 		html.append("    </head>\n");
 
-		html.append("    <body onload=\"document.forms[0].submit()\">\n");
 
+		html.append("    <body>\n");
 
 		html.append("        <noscript>\n");
 
 		html.append("            <p>\n");
 
 		html.append("                <strong>Note:</strong> Since your browser does not support JavaScript,\n");
 
@@ -247,8 +247,8 @@ public final class Saml2LogoutRequestFilter extends OncePerRequestFilter {
 
 		html.append("            </noscript>\n");
 
 		html.append("        </form>\n");
 
 		html.append("        \n");
 
+		html.append("        <script>window.onload = () => document.forms[0].submit();</script>\n");
 
 		html.append("    </body>\n");
 
-		html.append("    <script>window.onload = () => document.forms[0].submit();</script>\n");
 
 		html.append("</html>");
 
 		return html.toString();
 
 	}

+ 2 - 2
saml2/saml2-service-provider/src/main/java/org/springframework/security/saml2/provider/service/web/authentication/logout/Saml2RelyingPartyInitiatedLogoutSuccessHandler.java
查看文件 

@@ -123,7 +123,7 @@ public final class Saml2RelyingPartyInitiatedLogoutSuccessHandler implements Log
 
 				.append("content=\"script-src 'sha256-t+jmhLjs1ocvgaHBJsFcgznRk68d37TLtbI3NE9h7EU='\">\n");
 
 		html.append("        <meta charset=\"utf-8\" />\n");
 
 		html.append("    </head>\n");
 
-		html.append("    <body onload=\"document.forms[0].submit()\">\n");
 
+		html.append("    <body>\n");
 
 		html.append("        <noscript>\n");
 
 		html.append("            <p>\n");
 
 		html.append("                <strong>Note:</strong> Since your browser does not support JavaScript,\n");
 
@@ -151,8 +151,8 @@ public final class Saml2RelyingPartyInitiatedLogoutSuccessHandler implements Log
 
 		html.append("            </noscript>\n");
 
 		html.append("        </form>\n");
 
 		html.append("        \n");
 
+		html.append("        <script>window.onload = () => document.forms[0].submit();</script>\n");
 
 		html.append("    </body>\n");
 
-		html.append("    <script>window.onload = () => document.forms[0].submit();</script>\n");
 
 		html.append("</html>");
 
 		return html.toString();
 
 	}