From: david.mcweeney <david.mcweeney@est.tech>
Date: Tue, 10 Aug 2021 13:50:30 +0000 (+0100)
Subject: DMAAP-DR - SOnar SQL injection fix
X-Git-Tag: 2.1.9~1
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=a2fa78a7e5e9aa69454f3280f46081ac6965129c;hp=73ca35d85189b7b74417ad4166f00fccdaf12436;p=dmaap%2Fdatarouter.git

DMAAP-DR - SOnar SQL injection fix

Signed-off-by: david.mcweeney <david.mcweeney@est.tech>
Change-Id: I1ea6d6c308a6ae68e441ad426179e65e4bd02abc
Issue-ID: DMAAP-1623
---

diff --git a/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java b/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java
index 307d2d8a..7163a638 100755
--- a/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java
+++ b/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java
@@ -160,7 +160,7 @@ public class StatisticsServlet extends BaseServlet {
             outputType = CSV_OUTPUT_TYPE;
         }
         if (req.getParameter(OUTPUT_TYPE) != null && req.getParameter(OUTPUT_TYPE).equals(JSON_OUTPUT_TYPE)) {
-            map.put(OUTPUT_TYPE, req.getParameter(JSON_OUTPUT_TYPE));
+            map.put(OUTPUT_TYPE, JSON_OUTPUT_TYPE);
         }
         if (req.getParameter(START_TIME) != null) {
             map.put(START_TIME, req.getParameter(START_TIME));