public void doGet(HttpServletRequest request, HttpServletResponse response)
throws IOException, ServletException {
String id;
String height = "100%";
XssFilter xf = null;
xf = new XssFilter(request);
if (xf.getParameter("boxId") != null) {
id = xf.getParameter("boxId");
} else {
id = "0";
}
response.setContentType("text/html; chartset=UTF-8//IGNORE");
response.setHeader("boxId", xf.getParameter("boxId"));
PrintWriter out = response.getWriter();
StringBuffer source = new StringBuffer();
String requestURL = request.getRequestURL().toString().replaceFirst("iframe/", "");
if(requestURL.indexOf("/hicc/")!=-1) {
requestURL = requestURL.substring(requestURL.indexOf("/hicc/"));
}
source.append(requestURL);
source.append("?");
Enumeration names = request.getParameterNames();
while (names.hasMoreElements()) {
String key = xf.filter((String) names.nextElement());
String[] values = xf.getParameterValues(key);
if(values!=null) {
for (int i = 0; i < values.length; i++) {
source.append(key + "=" + values[i] + "&");
}
if (key.toLowerCase().intern() == "height".intern()) {
height = xf.getParameter(key);
}
}
}
StringBuffer output = new StringBuffer();
output.append("<html><body><iframe id=\"iframe");