DMAAP-DR - SOnar SQL injection fix

Signed-off-by: david.mcweeney <david.mcweeney@est.tech>
Change-Id: I1ea6d6c308a6ae68e441ad426179e65e4bd02abc
Issue-ID: DMAAP-1623

diff --git a/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java b/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java
index 307d2d8..7163a63 100755 (executable)
--- a/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java
+++ b/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/StatisticsServlet.java
@@ -160,7 +160,7 @@ public class StatisticsServlet extends BaseServlet {
             outputType = CSV_OUTPUT_TYPE;\r
         }\r
         if (req.getParameter(OUTPUT_TYPE) != null && req.getParameter(OUTPUT_TYPE).equals(JSON_OUTPUT_TYPE)) {\r
-            map.put(OUTPUT_TYPE, req.getParameter(JSON_OUTPUT_TYPE));\r
+            map.put(OUTPUT_TYPE, JSON_OUTPUT_TYPE);\r
         }\r
         if (req.getParameter(START_TIME) != null) {\r
             map.put(START_TIME, req.getParameter(START_TIME));\r