FCLT#77116 fac_verify_client.asp is eigenlijk unsafe: cookies er uit

svn path=/Website/trunk/; revision=63978

APPL/FAC/fac_verify_client.asp

@@ -162,6 +162,17 @@ var ip = String(Request.ServerVariables("REMOTE_ADDR"));
                           .addClass("aiai");
       }
 
+<%
+var allheaders = String(Request.ServerVariables("ALL_HTTP")).split("\n");
+for (var i =0; i < allheaders.length; i++)
+{
+    if (allheaders[i].match(/^HTTP_COOKIE/))
+    {
+        allheaders.splice(i, 1)
+    }
+}
+%>
+
       $("div.content").append("<table><tr><td>IP address: </td><td><%=ip%></td></tr>"
                             + "<tr><td>Screen resolution: </td><td>" + resWidth + "x" + resHeight + "</td></tr>"
                             + "<tr><td>Viewport resolution: </td><td>" + scrnWidth + "x" + scrnHeight + "</td></tr>"
@@ -171,7 +182,7 @@ var ip = String(Request.ServerVariables("REMOTE_ADDR"));
                             + "<tr><td>Locale list: </td><td>" + (['1', '2']).toLocaleString() + "</td></tr>"
                             + "</table>"
                             + modernMsg
-                            + "HTTP Headers:<br><div style='margin-left:2em;font-size:0.8em;line-height:1.2em;'><%=safe.html(Request.ServerVariables("ALL_HTTP"))%></div>"
+                            + "HTTP Headers:<br><div style='margin-left:2em;font-size:0.8em;line-height:1.2em;'><%=safe.html(allheaders.join("\n"))%></div>"
                             + "<%=safe.jsstring(__DumpCollection(Session.Contents, { title: "Session", exclude: /ASPFIXATION|FACSESSIONID|RVT_TOKEN/i }))%>"
                             + "<tr><td>LCID: </td><td><%=Session.LCID%></td></tr>"
                             + "<br><span style='font-size:0.8em;'>Facilitor <%=(toISODateTimeString(new Date()))%></span>"