Merge pull request #411 from serac/CAS-1429-ldap-filter-encoding

CAS-1429 Escape inputs into LDAP filter expressions.
apereo · Jan 12, 2015 · 7de61b4 · 7de61b4
2 parents c79fdfa + 1dad29c
commit 7de61b4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cas-server-support-ldap/src/main/java/org/jasig/cas/util/LdapUtils.java b/cas-server-support-ldap/src/main/java/org/jasig/cas/util/LdapUtils.java
@@ -76,7 +76,7 @@ public static String getFilterWithValues(final String filter,
         }
 
         for (final String key : properties.keySet()) {
-            final String value = LdapEncoder.nameEncode(properties.get(key));
+            final String value = LdapEncoder.filterEncode(properties.get(key));
             newFilter = newFilter.replaceAll(key, Matcher.quoteReplacement(value));
         }