anon-iclr-submission/benchname-bug-localization huggingface dataset:
Repository: faforever/downlords-faf-client
Issue: Fix generated avatar in message notification

My avatar is yellow, but in the notification it was some blue one.
I assume it still uses the username when it should use the user ID.
Make sure that for IRC users it still uses the username.


Changed files:
src/main/java/com/faforever/client/chat/AbstractChatTabController.java

diff --git a/src/main/java/com/faforever/client/chat/AbstractChatTabController.java b/src/main/java/com/faforever/client/chat/AbstractChatTabController.java
index d63ea7d2..f0cb7f46 100644
--- a/src/main/java/com/faforever/client/chat/AbstractChatTabController.java
+++ b/src/main/java/com/faforever/client/chat/AbstractChatTabController.java
@@ -693,18 +693,23 @@ public abstract class AbstractChatTabController {
   }
 
   protected void showNotificationIfNecessary(ChatMessage chatMessage) {
-    if (!stage.isFocused() || !stage.isShowing()) {
-      notificationService.addNotification(new TransientNotification(
-          chatMessage.getUsername(),
-          chatMessage.getMessage(),
-          IdenticonUtil.createIdenticon(chatMessage.getUsername()),
-          new Action(event -> {
-            mainController.selectChatTab();
-            stage.toFront();
-            getRoot().getTabPane().getSelectionModel().select(getRoot());
-          }))
-      );
+    if (stage.isFocused() && stage.isShowing()) {
+      return;
     }
+
+    PlayerInfoBean player = playerService.getPlayerForUsername(chatMessage.getUsername());
+    String identiconSource = player != null ? String.valueOf(player.getId()) : chatMessage.getUsername();
+
+    notificationService.addNotification(new TransientNotification(
+        chatMessage.getUsername(),
+        chatMessage.getMessage(),
+        IdenticonUtil.createIdenticon(identiconSource),
+        new Action(event -> {
+          mainController.selectChatTab();
+          stage.toFront();
+          getRoot().getTabPane().getSelectionModel().select(getRoot());
+        }))
+    );
   }
 
   protected String getMessageCssClass(String login) {
Repository: mercedes-benz/sechub
Issue: Fix develop branch

With #1887 the GH action build workflow broke due to a misspelled variable. This shall be fixed here.

Changed files:
sechub-notification/src/main/java/com/mercedesbenz/sechub/domain/notification/user/NewApiTokenRequestedUserNotificationService.java

diff --git a/sechub-notification/src/main/java/com/mercedesbenz/sechub/domain/notification/user/NewApiTokenRequestedUserNotificationService.java b/sechub-notification/src/main/java/com/mercedesbenz/sechub/domain/notification/user/NewApiTokenRequestedUserNotificationService.java
index 992773fb0..54d1ef4d5 100644
--- a/sechub-notification/src/main/java/com/mercedesbenz/sechub/domain/notification/user/NewApiTokenRequestedUserNotificationService.java
+++ b/sechub-notification/src/main/java/com/mercedesbenz/sechub/domain/notification/user/NewApiTokenRequestedUserNotificationService.java
@@ -29,7 +29,7 @@ public class NewApiTokenRequestedUserNotificationService {
         String link = userMessage.getLinkWithOneTimeToken();
 
         NewApiTokenRequestedUserNotificationServiceHelper serviceHelper = new NewApiTokenRequestedUserNotificationServiceHelper(Clock.systemDefaultZone());
-        String tokenExpirationDateTime = serviceHelper.getApiTokenExpireDate();
+        String tokenExpireDateTime = serviceHelper.getApiTokenExpireDate();
 
         StringBuilder emailContent = new StringBuilder();
         emailContent.append("You requested a new API token. The token was created for you and expires at ");
Repository: mercedes-benz/sechub
Issue: HTML report downloaded in browser shows no trafficlight or any other style information

## Situation
While testing #1807 I became aware, that the HTML report does no longer show any style information and looks very ugly when directly downloaded from server (e.g. when using DAUI and downloading a report directly via HTTPS with Browser)
When storing the file locally and showing it inside the browser everything works fine!

## Wanted
HTML report shall have styling gain

## Analyze
With #1672 we have set a CSP - maybe this was the reason.

## Solution
Setup CSP definition inside `AbstractAllowSecHubAPISecurityConfiguration.java` in a way where the HTML report can be downloaded and shown directly from server.


Changed files:
sechub-shared-kernel/src/main/java/com/mercedesbenz/sechub/sharedkernel/configuration/AbstractAllowSecHubAPISecurityConfiguration.java

diff --git a/sechub-shared-kernel/src/main/java/com/mercedesbenz/sechub/sharedkernel/configuration/AbstractAllowSecHubAPISecurityConfiguration.java b/sechub-shared-kernel/src/main/java/com/mercedesbenz/sechub/sharedkernel/configuration/AbstractAllowSecHubAPISecurityConfiguration.java
index 0a0a6f42b..1c71f6bdf 100644
--- a/sechub-shared-kernel/src/main/java/com/mercedesbenz/sechub/sharedkernel/configuration/AbstractAllowSecHubAPISecurityConfiguration.java
+++ b/sechub-shared-kernel/src/main/java/com/mercedesbenz/sechub/sharedkernel/configuration/AbstractAllowSecHubAPISecurityConfiguration.java
@@ -67,7 +67,7 @@ public abstract class AbstractAllowSecHubAPISecurityConfiguration extends WebSec
 			httpBasic()./* no login screen, just basic auth */
 		and().
 			headers().
-				contentSecurityPolicy("default-src 'none'");
+				contentSecurityPolicy("default-src 'none'; style-src 'unsafe-inline'");
 
  		/* @formatter:on */
     }