webui\src\main\java\com\taskadapter\webui\Exporter.java

gistfile1.java

if (destinationDataHolder.getData() instanceof MSPConfig) {
                    // implementation of http://www.hostedredmine.com/issues/68820
                    // quite ugly
                    // TODO check for XSS attack with wrong paths...
                    MSPConfig config = (MSPConfig) destinationDataHolder.getData();
                    if (config.getOutputAbsoluteFilePath().isEmpty()) {
                        String userName = navigator.getServices().getAuthenticator().getUserName();
                        FileManager fm = new FileManager();
                        File f = fm.getUserFolder(userName);
                        String newPath = String.format("%s/%s-%s.xml", f.getAbsolutePath(), sourceDataHolder.getType(), destinationDataHolder.getType());
                        config.setOutputAbsoluteFilePath(newPath);
                        config.setInputAbsoluteFilePath(newPath);
                    }
                } else {
                    destinationDataHolder.getData().validateForSave();
                }