For the moment we are not going to sanitize header values because it's taking a lot of problem.

iroqueta · iroqueta · commit 4efc88af0655 · 2023-06-21T10:54:57.000-03:00
diff --git a/wrapperjakarta/src/main/java/com/genexus/servlet/http/HttpServletResponse.java b/wrapperjakarta/src/main/java/com/genexus/servlet/http/HttpServletResponse.java
@@ -28,9 +28,9 @@ public void setHeader(String name, String value) {
 	}
 
 	public void setHeader(String name, String value, boolean sanitize) {
-		if (sanitize)
-			resp.setHeader(name, CommonUtil.Sanitize(value, CommonUtil.HTTP_HEADER_WHITELIST));
-		else
+		//if (sanitize)
+		//	resp.setHeader(name, CommonUtil.Sanitize(value, CommonUtil.HTTP_HEADER_WHITELIST));
+		//else
 			resp.setHeader(name, value);
 	}
 
diff --git a/wrapperjavax/src/main/java/com/genexus/servlet/http/HttpServletResponse.java b/wrapperjavax/src/main/java/com/genexus/servlet/http/HttpServletResponse.java
@@ -28,9 +28,9 @@ public void setHeader(String name, String value) {
 	}
 
 	public void setHeader(String name, String value, boolean sanitize) {
-		if (sanitize)
-			resp.setHeader(name, CommonUtil.Sanitize(value, CommonUtil.HTTP_HEADER_WHITELIST));
-		else
+		//if (sanitize)
+		//	resp.setHeader(name, CommonUtil.Sanitize(value, CommonUtil.HTTP_HEADER_WHITELIST));
+		//else
 			resp.setHeader(name, value);
 	}
 

Original file line number	Diff line number	Diff line change
`@@ -28,9 +28,9 @@ public void setHeader(String name, String value) {`
`28`	`28`	`}`
`29`	`29`
`30`	`30`	`public void setHeader(String name, String value, boolean sanitize) {`
`31`		`- if (sanitize)`
`32`		`- resp.setHeader(name, CommonUtil.Sanitize(value, CommonUtil.HTTP_HEADER_WHITELIST));`
`33`		`- else`
	`31`	`+ //if (sanitize)`
	`32`	`+ // resp.setHeader(name, CommonUtil.Sanitize(value, CommonUtil.HTTP_HEADER_WHITELIST));`
	`33`	`+ //else`
`34`	`34`	`resp.setHeader(name, value);`
`35`	`35`	`}`
`36`	`36`