From ca1310bd1224e0ec6a5b8ef922be81b7df9b221f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Julius=20H=C3=A4rtl?= <jus@bitgrid.net>
Date: Tue, 13 Oct 2020 08:43:27 +0200
Subject: [PATCH] Encode requesttoken for logout url in auto logout
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Julius Härtl <jus@bitgrid.net>
---
 core/js/dist/main.js          | Bin 1451649 -> 1451669 bytes
 core/js/dist/main.js.map      | Bin 5413139 -> 5413170 bytes
 core/src/session-heartbeat.js |   2 +-
 3 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/js/dist/main.js b/core/js/dist/main.js
index f39cc827561717bb1a711358673d159478f1097e..c26cfb4ffe8e6cd34d7ea0c4cabbbd61640cf733 100644
GIT binary patch
delta 89
zcmZoX8!`24L_-T>3sVbo3rh=Y3tJ0&3r7oQ3)dEIf!gUGMVY18BJ>h9H8k60YPo@!
f2Z(urm=B2gfmi^D1%X%yh=qYzWV=kQXzEG;6Nnr8

delta 90
zcmbPwHlp!tL_-T>3sVbo3rh=Y3tJ0&3r7oQ3)dEIfm$B_q^#8B5{(GGL`{u$gIaDN
g<^f_}Am#&NejpYAVnHAl0%Bnx7TIo4E1J3z08^YDc>n+a

diff --git a/core/js/dist/main.js.map b/core/js/dist/main.js.map
index 036f91135159b10f007bd2e71e5aade6623fa610..94cd7d706742f8cc163da9933d66a66895279acc 100644
GIT binary patch
delta 359
zcmWN=$w~qN9Kd0+vPGR1O)Xp07PZC}(-zyDnbdM=k<MOZE`^0z&@q@l_y8Sz4Uxb{
z2)anuo}x$S_rdqk{kC=aE(2ndK^c-^vCD{z%9xCcL!9FJRK6_t+q0q8bxo`5&7`54
znsJ|N^(}=Hoa7Xz>86J>^wLK^XF10J=efW|E-}au!(8SHSGmRrql|H#8&nzRCbziF
z9VWQTBvahuey?vG{QS26B4MvmF&nRD^X2a8!F-IyTAk`4(>&raPk72RW~fo8!E<Jr
ZW1bhhWPwGNSmqV4dBfXYr&_6{{{e1oqci{j

delta 345
zcmWN=$w~qN9Kd0+(#hP?7H!i^(@HDT+{$vxvKlu!dy%1oU_^Eg<_|tVZz6$@5O|TU
z^ECcG_{QU@>4)F4ASPLqC0Q1;SVWN(vC690#Qy8})0M0m>y;|G>d4R?bkfB&y6NFM
zH@L|ydg<dfceu+v?$gfz4;bVjLk#nX5k`5;6P_~0IL~;_3nqBUBvZU%nwg2AXa5b?
zn>OrdA79$%@b$f~4Wgr2H^)4$dBXy4dB-A4EVIHY?^)vmA6e%UpZP+S4K~?gdot^G
Gdigo6F{6k8

diff --git a/core/src/session-heartbeat.js b/core/src/session-heartbeat.js
index 9902bef882a..38db6b49a5c 100644
--- a/core/src/session-heartbeat.js
+++ b/core/src/session-heartbeat.js
@@ -126,7 +126,7 @@ const registerAutoLogout = () => {
 		const timeout = Date.now() - config.session_lifetime * 1000
 		if (lastActive < timeout) {
 			console.info('Inactivity timout reached, logging out')
-			const logoutUrl = generateUrl('/logout') + '?requesttoken=' + getRequestToken()
+			const logoutUrl = generateUrl('/logout') + '?requesttoken=' + encodeURIComponent(getRequestToken())
 			window.location = logoutUrl
 		}
 	}, 1000)
-- 
GitLab