Address new vulnerability with handleClearListValCache and handleClea…

…rListStatCache by separating these into two try-catch blocks
dtcenter · Jul 9, 2024 · 298e3d5 · 298e3d5
1 parent 703eaf1
commit 298e3d5
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/java/edu/ucar/metviewer/MVServlet.java b/java/edu/ucar/metviewer/MVServlet.java
@@ -1294,6 +1294,10 @@ public void doPost(HttpServletRequest request, HttpServletResponse response) {
             strResp.append(MVUtil.domSourceToString(docResp));
             try {
               handleClearListValCache();
+            } catch(ParserConfigurationException e) {
+              logger.error(e.getMessage());
+            }
+            try{
               handleClearListStatCache();
             } catch (ParserConfigurationException e) {
               logger.error(e.getMessage());