Fix username unescaping in challenge question flow

wso2 · Sep 24, 2024 · efebac1 · efebac1
1 parent 72d1ec4
commit efebac1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/identity-apps-core/apps/recovery-portal/src/main/webapp/challenge-question-request.jsp b/identity-apps-core/apps/recovery-portal/src/main/webapp/challenge-question-request.jsp
@@ -35,6 +35,9 @@
 
 <%
     String username = IdentityManagementEndpointUtil.getStringValue(request.getAttribute("username"));
+    if (StringUtils.isNotBlank(username)) {
+        username = StringEscapeUtils.unescapeJava(username);
+    }
     RetryError errorResponse = (RetryError) request.getAttribute("errorResponse");
 
     if (errorResponse != null) {

diff --git a/identity-apps-core/apps/recovery-portal/src/main/webapp/recovery.jsp b/identity-apps-core/apps/recovery-portal/src/main/webapp/recovery.jsp
@@ -80,7 +80,6 @@
 
     if (StringUtils.isNotBlank(username)) {
         username = (String) request.getAttribute("resolvedUsername");
-        username = StringEscapeUtils.unescapeJava(username);
     }
 
     // Password recovery parameters