OpenMRS

Timestamp:

08/26/08 21:41:04 (3 months ago)

Author:

bwolfe

Message:

Hiding error stack traces from non-authenticated users

Files:

• openmrs/trunk/src/web/org/openmrs/web/OpenmrsFilter.java (modified) (1 diff)

openmrs/trunk/src/web/org/openmrs/web/OpenmrsFilter.java

@@ -90 +90 @@
-                        
-                        // User context is created if it doesn't already exist and added to the session
+                        // note: this usercontext storage logic is copied to webinf/view/uncaughtexception.jsp to 
+                        //               prevent stack traces being shown to non-authenticated users
-                        userContext = (UserContext) httpSession.getAttribute(WebConstants.OPENMRS_USER_CONTEXT_HTTPSESSION_ATTR);
-