[JM-629] Fixed cross site scripting bug in login page.

git-svn-id: http://svn.igniterealtime.org/svn/repos/openfire/trunk@10765 b35dd754-fafc-0310-a699-88a17e54d16e

src/web/login.jsp

@@ -54,6 +54,7 @@
 
     String password = ParamUtils.getParameter(request, "password");
     String url = ParamUtils.getParameter(request, "url");
+    url = org.jivesoftware.util.StringUtils.escapeHTMLTags(url);
 
     // SSO between cluster nodes
     String secret = ParamUtils.getParameter(request, "secret");