OF-671: Prevent XSS for domain attribute on s2s config page

git-svn-id: http://svn.igniterealtime.org/svn/repos/openfire/trunk@13647 b35dd754-fafc-0310-a699-88a17e54d16e

src/web/server2server-settings.jsp

@@ -46,6 +46,10 @@
     boolean serverAllowed = request.getParameter("serverAllowed") != null;
     boolean serverBlocked = request.getParameter("serverBlocked") != null;
     String domain = ParamUtils.getParameter(request,"domain");
+    // OF-671
+    if (domain != null) {
+    	domain = StringUtils.removeXSSCharacters(domain);
+    }
     String remotePort = ParamUtils.getParameter(request,"remotePort");
     boolean updateSucess = false;
     boolean allowSuccess = false;