inteligr8/alfresco-community-repo
1
0
Fork 0
mirror of https://github.com/Alfresco/alfresco-community-repo.git synced 2025-08-21 18:09:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

ALF-9127 - WebDAV - fix unsafe use of SimpleDateFormat

Browse Source 
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@28420 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Jan Vonka
2011-06-16 09:46:50 +00:00
parent 4cc14b3106
commit faf34d29fb
1 changed files with 32 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
source/java/org/alfresco/repo/webdav/WebDAV.java
View File

@@ -1,5 +1,5 @@
/*
* Copyright (C) 2005-2010 Alfresco Software Limited.
* Copyright (C) 2005-2011 Alfresco Software Limited.
*
* This file is part of Alfresco
*
@@ -20,7 +20,6 @@ package org.alfresco.repo.webdav;
import java.io.Serializable;
import java.net.URLDecoder;
import java.text.SimpleDateFormat;
import java.util.Date;
import java.util.Hashtable;
import java.util.Locale;
@@ -249,12 +248,6 @@ public class WebDAV
private static String CREATION_DATE_FORMAT = "yyyy-MM-dd'T'HH:mm:ss'Z'";
// HTTP header date/time formatter
// NOTE: According to RFC2616 dates should always be in English and in
// the GMT timezone see http://rfc.net/rfc2616.html#p20 for details
private static SimpleDateFormat _httpDateFormatter = new SimpleDateFormat(HEADER_IF_DATE_FORMAT, Locale.ENGLISH);
/**
* Formats the given date so that it conforms with the Last-Modified HTTP header
*
@@ -263,7 +256,7 @@ public class WebDAV
*/
public static String formatModifiedDate(Date date)
{
return _httpDateFormatter.format(date);
return formatHeaderDate(date);
}
/**
@@ -274,7 +267,7 @@ public class WebDAV
*/
public static String formatModifiedDate(long ldate)
{
return _httpDateFormatter.format(new Date(ldate));
return formatHeaderDate(ldate);
}
/**
@@ -307,7 +300,10 @@ public class WebDAV
*/
public static String formatHeaderDate(Date date)
{
return _httpDateFormatter.format( date);
// HTTP header date/time format
// NOTE: According to RFC2616 dates should always be in English and in
// the GMT timezone see http://rfc.net/rfc2616.html#p20 for details
return DateFormatUtils.format(date, HEADER_IF_DATE_FORMAT, TimeZone.getTimeZone("GMT"), Locale.ENGLISH);
}
/**
@@ -316,9 +312,12 @@ public class WebDAV
* @param date long
* @return String
*/
public static String formatHeaderDate(long date)
public static String formatHeaderDate(long ldate)
{
return _httpDateFormatter.format( new Date(date));
// HTTP header date/time format
// NOTE: According to RFC2616 dates should always be in English and in
// the GMT timezone see http://rfc.net/rfc2616.html#p20 for details
return DateFormatUtils.format(ldate, HEADER_IF_DATE_FORMAT, TimeZone.getTimeZone("GMT"), Locale.ENGLISH);
}
/**
@@ -640,9 +639,6 @@ public class WebDAV
*/
static
{
// ensure http dates are in GMT time zone (see note above)
_httpDateFormatter.setTimeZone(TimeZone.getTimeZone("GMT"));
// Create the WebDAV to Alfresco property mapping table
_propertyNameMap = new Hashtable<String, QName>();