From: Lorraine Welch <lb2391@att.com>
Date: Thu, 4 Feb 2021 19:56:02 +0000 (+0000)
Subject: Merge "Changes done to improve error log percentage"
X-Git-Url: https://gerrit.onap.org/r/gitweb?p=portal.git;a=commitdiff_plain;h=8bef43390ca9a80088fcdd8a7dbef6d001c12452;hp=e427f4a23b209a5ecbf437460a5a68bb79642e26

Merge "Changes done to improve error log percentage"
---

diff --git a/ecomp-portal-BE-os/src/main/java/org/onap/portalapp/filter/SecurityXssValidator.java b/ecomp-portal-BE-os/src/main/java/org/onap/portalapp/filter/SecurityXssValidator.java
index 3adc313a..cc4ba85f 100644
--- a/ecomp-portal-BE-os/src/main/java/org/onap/portalapp/filter/SecurityXssValidator.java
+++ b/ecomp-portal-BE-os/src/main/java/org/onap/portalapp/filter/SecurityXssValidator.java
@@ -160,18 +160,21 @@ public class SecurityXssValidator {
 					logger.info(EELFLoggerDelegate.applicationLogger, "denyXSS() replacing &timeseclgn with empty string for request value : " + value);
 					value=value.replaceAll("&timeseclgn", "");
 				}
+				while(value.contains("%25")) {
+					value = value.replaceAll("%25", "%");
+				}
 				value = ESAPI.encoder().canonicalize(value);
 				for (Pattern xssInputPattern : XSS_INPUT_PATTERNS) {
 					if (xssInputPattern.matcher(value).matches()) {
 						flag = Boolean.TRUE;
 						break;
 					}
-
 				}
 			}
 
 		} catch (Exception e) {
-			logger.error(EELFLoggerDelegate.errorLogger, "denyXSS() failed for request with value : " + value, e);
+			logger.error(EELFLoggerDelegate.errorLogger, "denyXSS() failed for request with value : " + e.getMessage());
+			logger.debug(EELFLoggerDelegate.debugLogger, "denyXSS() failed for request with value : " + value, e);
 		}
 
 		return flag;
@@ -208,6 +211,5 @@ public class SecurityXssValidator {
 	public void setXSS_INPUT_PATTERNS(List<Pattern> xSS_INPUT_PATTERNS) {
 		XSS_INPUT_PATTERNS = xSS_INPUT_PATTERNS;
 	}
-	
 
 }
\ No newline at end of file