X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=ecomp-portal-BE-os%2Fsrc%2Fmain%2Fjava%2Forg%2Fonap%2Fportalapp%2Ffilter%2FSecurityXssValidator.java;h=cc4ba85f9389d6c99db674622230c14a4f275342;hb=72a2f45de200bb556fb3f7b4dde2b66e251609d1;hp=3adc313a0e207a454782eafdfb46e717373b8c4a;hpb=be89a5570691d36bf2b8b12035f81d5c85de3e70;p=portal.git

diff --git a/ecomp-portal-BE-os/src/main/java/org/onap/portalapp/filter/SecurityXssValidator.java b/ecomp-portal-BE-os/src/main/java/org/onap/portalapp/filter/SecurityXssValidator.java
index 3adc313a..cc4ba85f 100644
--- a/ecomp-portal-BE-os/src/main/java/org/onap/portalapp/filter/SecurityXssValidator.java
+++ b/ecomp-portal-BE-os/src/main/java/org/onap/portalapp/filter/SecurityXssValidator.java
@@ -160,18 +160,21 @@ public class SecurityXssValidator {
 					logger.info(EELFLoggerDelegate.applicationLogger, "denyXSS() replacing &timeseclgn with empty string for request value : " + value);
 					value=value.replaceAll("&timeseclgn", "");
 				}
+				while(value.contains("%25")) {
+					value = value.replaceAll("%25", "%");
+				}
 				value = ESAPI.encoder().canonicalize(value);
 				for (Pattern xssInputPattern : XSS_INPUT_PATTERNS) {
 					if (xssInputPattern.matcher(value).matches()) {
 						flag = Boolean.TRUE;
 						break;
 					}
-
 				}
 			}
 
 		} catch (Exception e) {
-			logger.error(EELFLoggerDelegate.errorLogger, "denyXSS() failed for request with value : " + value, e);
+			logger.error(EELFLoggerDelegate.errorLogger, "denyXSS() failed for request with value : " + e.getMessage());
+			logger.debug(EELFLoggerDelegate.debugLogger, "denyXSS() failed for request with value : " + value, e);
 		}
 
 		return flag;
@@ -208,6 +211,5 @@ public class SecurityXssValidator {
 	public void setXSS_INPUT_PATTERNS(List<Pattern> xSS_INPUT_PATTERNS) {
 		XSS_INPUT_PATTERNS = xSS_INPUT_PATTERNS;
 	}
-	
 
 }
\ No newline at end of file