Can we use JSP code in header_include file?

[jkjha]

I am trying to add username header at the top of my opengrok instance and for that, I am thinking of using header_include configuration mentioned here: https://github.com/oracle/opengrok/wiki/Webapp-configuration

<%@ page language="java" isELIgnored="false" import = "java.io.*,java.util.*,java.net.*" %>

<%
               Enumeration headerNames = request.getHeaderNames();
               while(headerNames.hasMoreElements()) {
                  String paramName = (String)headerNames.nextElement();
                  out.print("<tr><td>" + paramName + "</td>\n");
                  String paramValue = request.getHeader(paramName);
                  out.println("<td> " + paramValue + "</td></tr>\n");
               }
 %>

But it seems JSP code is not supported in header_include? This gets printed as HTML on UI:

Can someone please help.

[vladak]

The includes accept HTML data only. See

opengrok/opengrok-web/src/main/webapp/httpheader.jspf

Line 109 in 8a7aa08

<%= cfg.getEnv().getIncludeFiles().getHttpHeaderIncludeFileContent(false) %>

[jkjha]

Thanks @vladak for the help. One quick question...
so, only way to get the username or any custom data example (request.getHeader('x-email')) is editing pageheader.jspf file (by creating our custom docker image)? I am trying to avoid creating/ editing custom image for easy upgrade in future.

[vladak]

Yep. I'd be very hesitant to allow JSP code inserts. One can cause enough harm just with HTML/JS code.