From a2fa78a7e5e9aa69454f3280f46081ac6965129c Mon Sep 17 00:00:00 2001
From: "david.mcweeney" <david.mcweeney@est.tech>
Date: Tue, 10 Aug 2021 14:50:30 +0100
Subject: [PATCH] DMAAP-DR - SOnar SQL injection fix

Signed-off-by: david.mcweeney <david.mcweeney@est.tech>
Change-Id: I1ea6d6c308a6ae68e441ad426179e65e4bd02abc
Issue-ID: DMAAP-1623
---
 .../java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java b/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java
index 307d2d8a..7163a638 100755
--- a/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java
+++ b/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java
@@ -160,7 +160,7 @@ public class StatisticsServlet extends BaseServlet {
             outputType = CSV_OUTPUT_TYPE;
         }
         if (req.getParameter(OUTPUT_TYPE) != null && req.getParameter(OUTPUT_TYPE).equals(JSON_OUTPUT_TYPE)) {
-            map.put(OUTPUT_TYPE, req.getParameter(JSON_OUTPUT_TYPE));
+            map.put(OUTPUT_TYPE, JSON_OUTPUT_TYPE);
         }
         if (req.getParameter(START_TIME) != null) {
             map.put(START_TIME, req.getParameter(START_TIME));
-- 
2.16.6