thymeleaf security hotfix for users page

Author: jvanmalder

app/src/main/resources/templates/users.html

@@ -20,17 +20,16 @@
                     </thead>
                     <tbody>
                         <tr th:each="user : ${users}" >
-                            <td class="mdl-data-table__cell--non-numeric user-name" th:text="${user.name}" th:onclick="'showUserDialog(&quot;' + ${user.login} + '&quot;)'"></td>
-                            <td class="mdl-data-table__cell--non-numeric user-email" th:text="${user.email}" th:onclick="'showUserDialog(&quot;' + ${user.login} + '&quot;)'"></td>
-                            <td class="mdl-data-table__cell--non-numeric user-username" th:text="${user.login}" th:onclick="'showUserDialog(&quot;' + ${user.login} + '&quot;)'"></td>
-                            <td class="mdl-data-table__cell--non-numeric user-role" th:text="${user.role.description}" th:onclick="'showUserDialog(&quot;' + ${user.login} + '&quot;)'"></td>
+                            <td class="mdl-data-table__cell--non-numeric user-name" th:data1="${user.login}" th:text="${user.name}" th:onclick="showUserDialog(this.getAttribute('data1'))"></td>
+                            <td class="mdl-data-table__cell--non-numeric user-email" th:data1="${user.login}" th:text="${user.email}" th:onclick="showUserDialog(this.getAttribute('data1'))"></td>
+                            <td class="mdl-data-table__cell--non-numeric user-username" th:text="${user.login}" th:data1="${user.login}" th:onclick="showUserDialog(this.getAttribute('data1'))"></td>                            <td class="mdl-data-table__cell--non-numeric user-role"  th:data1="${user.login}" th:text="${user.role.description}" th:onclick="showUserDialog(this.getAttribute('data1'))"></td>
                             <td class="mdl-data-table__cell--non-numeric">
                                 <label class="mdl-checkbox mdl-js-checkbox mdl-js-ripple-effect" th:for="'checkbox-' + ${user.id}" th:onclick="'changeActive('+ ${user.id} + ')'">
                                     <input type="checkbox" th:id="'checkbox-' + ${user.id}" class="mdl-checkbox__input" th:checked="${user.active}"/>
                                 </label>
                             </td>
                             <td class="mdl-data-table__cell--non-numeric">
-                                <button class="mdl-button mdl-js-button mdl-button--icon mdl-button--colored" style="color:rgb(50, 166, 211);" th:onclick="'openEditUserDialog('+ ${user.id} + ', &quot;' + ${user.login} + '&quot;, &quot;' + ${user.role.description} + '&quot;, &quot;' + ${user.name} + '&quot;, &quot;' + ${user.email} + '&quot;, ' + ${user.active} + ')'">
+                                <button class="mdl-button mdl-js-button mdl-button--icon mdl-button--colored" style="color:rgb(50, 166, 211);" th:data1="${user.id}" th:data2="${user.login}" th:data3="${user.role.description}" th:data4="${user.name}" th:data5="${user.email}" th:data6="${user.active}" th:onclick="openEditUserDialog(this.getAttribute('data1'), this.getAttribute('data2'), this.getAttribute('data3'),this.getAttribute('data4'),this.getAttribute('data5'), this.getAttribute('data6'))">
                                     <i class="material-icons">edit</i>
                                 </button>
                             </td>
@@ -41,4 +40,4 @@
         </div>
         <dialog class="mdl-dialog"></dialog>
     </body>
-</html>
+</html>

build.gradle

@@ -40,7 +40,7 @@ ext.buildTime = {
 }
 
 group = 'eu.openanalytics'
-ext.versionNumber = '1.3.0'
+ext.versionNumber = '1.3.1'
 ext.baseVersion = versionNumber
 version = versionNumber
 description = """rdepot"""
@@ -249,4 +249,4 @@ ext.maven = {
         username = System.getenv("OA_NEXUS_USER")
         password = System.getenv("OA_NEXUS_PWD")
     }
-}
+}

gradle/wrapper/gradle-wrapper.properties

@@ -0,0 +1,5 @@
+distributionBase=GRADLE_USER_HOME
+distributionPath=wrapper/dists
+distributionUrl=https\://services.gradle.org/distributions/gradle-6.4.1-bin.zip
+zipStoreBase=GRADLE_USER_HOME
+zipStorePath=wrapper/dists