Index: lams_central/web/login.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_central/web/login.jsp,v
diff -u -r1.51.2.6 -r1.51.2.7
--- lams_central/web/login.jsp	30 Jun 2015 08:44:37 -0000	1.51.2.6
+++ lams_central/web/login.jsp	20 Oct 2015 10:41:38 -0000	1.51.2.7
@@ -39,6 +39,7 @@
 			<script type="text/javascript">
 				function submitForm() {
 					var password = $('#j_password').val();
+						
 					if (${encrypt}) {
 						$('#j_password').val(hex_sha1(password));
 					}
@@ -114,7 +115,7 @@
 								</div>
 							</c:if>
 							
-							<input type="hidden" name="redirectURL" value='${param.redirectURL}'/>
+							<input type="hidden" name="redirectURL" value='<c:out value="${param.redirectURL}" escapeXml="true" />' />
 							
 							<p class="first">
 								<fmt:message key="label.username" />
@@ -193,7 +194,7 @@
 				<form style="display: none" method="POST" action="j_security_check">
 					<input type="hidden" name="j_username" value="${login}" />
 					<input type="hidden" name="j_password" value="${password}" />
-					<input type="hidden" name="redirectURL" value="${param.redirectURL }" />
+					<input type="hidden" name="redirectURL" value='<c:out value="${param.redirectURL}" escapeXml="true" />' />
 				</form>
 			</div>
 			<div id="footer">