FIX pb with shibboleth

modules/content_management/class/class_content_manager_tools_Abstract.php

@@ -451,7 +451,7 @@ abstract class content_management_tools_Abstract
         $jnlp_balise->appendChild($jnlp_attribute2);
 
         $jnlp_attribute3 = $docXML->createAttribute('href');
-        $jnlp_attribute3->value = $jnlp_name;
+        $jnlp_attribute3->value = htmlentities($jnlp_name);
         $jnlp_balise->appendChild($jnlp_attribute3);
 
         //"{$pathUrl}/rest/jnlp?fileName={$jnlp_name}";

src/app/contentManagement/controllers/JnlpController.php

@@ -182,7 +182,7 @@ class JnlpController
 
     public function renderJnlp(Request $request, Response $response, array $aArgs)
     {
-        if (explode('.', $aArgs['jnlpUniqueId'])[1] != 'jnlp') {
+        if (strtoupper(pathinfo($aArgs['jnlpUniqueId'], PATHINFO_EXTENSION)) != 'JNLP') {
             return $response->withStatus(403)->withJson(['errors' => 'File extension forbidden']);
         }