added _ to the allowed characterset. Allows for usernames with an _ in them

mayhew64@gmail.com · mayhew64@gmail.com · commit 930195c115df · 2012-04-25T18:29:31.000Z
git-svn-id: http://webgoat.googlecode.com/svn/trunk@463 4033779f-a91e-0410-96ef-6bf7bf53c507
diff --git a/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java b/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java
@@ -41,7 +41,7 @@
 public class ParameterParser
 {
 
-	private final static String ALLOWED_CHARACTERS = "$()-?.@!,:;=//+"; // Don't
+	private final static String ALLOWED_CHARACTERS = "_$()-?.@!,:;=//+"; // Don't
 	// allow
 	// #&
 	// specifically

Original file line number	Diff line number	Diff line change
`@@ -41,7 +41,7 @@`
`41`	`41`	`public class ParameterParser`
`42`	`42`	`{`
`43`	`43`
`44`		`- private final static String ALLOWED_CHARACTERS = "$()-?.@!,:;=//+"; // Don't`
	`44`	`+ private final static String ALLOWED_CHARACTERS = "_$()-?.@!,:;=//+"; // Don't`
`45`	`45`	`// allow`
`46`	`46`	`// #&`
`47`	`47`	`// specifically`