Merge commit from fork

OpenIdentityPlatform · Jul 23, 2024 · 602b5f5 · 602b5f5
1 parent ba0c938
commit 602b5f5
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/openam-oauth2/src/main/java/org/forgerock/oauth2/core/RealmOAuth2ProviderSettings.java b/openam-oauth2/src/main/java/org/forgerock/oauth2/core/RealmOAuth2ProviderSettings.java
@@ -13,6 +13,7 @@
  *
  * Copyright 2014-2016 ForgeRock AS.
  * Portions Copyrighted 2015 Nomura Research Institute, Ltd.
+ * Portions Copyrighted 2024 3A Systems LLC.
  */
 
 package org.forgerock.oauth2.core;
@@ -39,6 +40,7 @@
 import java.util.Map;
 import java.util.Set;
 
+import freemarker.core.TemplateClassResolver;
 import org.forgerock.guice.core.InjectorHolder;
 import org.forgerock.json.JsonValue;
 import org.forgerock.json.jose.jwk.KeyUse;
@@ -963,6 +965,7 @@ public Template getCustomLoginUrlTemplate() throws ServerException {
             if (loginUrlTemplateString != null) {
                 loginUrlTemplate = new Template("customLoginUrlTemplate", new StringReader(loginUrlTemplateString),
                         new Configuration());
+                loginUrlTemplate.setNewBuiltinClassResolver(TemplateClassResolver.SAFER_RESOLVER);
             }
             return loginUrlTemplate;
         } catch (SSOException | IOException | SMSException e) {