java/code/webapp/WEB-INF/pages/ssm/systems/misc/lock-unlock-system.jsp | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
New commits:
commit d23d20b69bdcf786e44d43508c424258e3082e4d
Author: Tomas Kasparek <tkasparek(a)redhat.com>
Date: Wed Jan 29 14:13:52 2014 +0100
1009396 - escape system name for ssm lock/unlock page
diff --git a/java/code/webapp/WEB-INF/pages/ssm/systems/misc/lock-unlock-system.jsp
b/java/code/webapp/WEB-INF/pages/ssm/systems/misc/lock-unlock-system.jsp
index d6d70f9..b2103f6 100644
--- a/java/code/webapp/WEB-INF/pages/ssm/systems/misc/lock-unlock-system.jsp
+++ b/java/code/webapp/WEB-INF/pages/ssm/systems/misc/lock-unlock-system.jsp
@@ -11,6 +11,7 @@
<%@taglib
uri="http://struts.apache.org/tags-html" prefix="html"
%>
<%@taglib
uri="http://struts.apache.org/tags-bean" prefix="bean"
%>
<%@taglib
uri="http://rhn.redhat.com/tags/list" prefix="rl" %>
+<%@ taglib
uri="http://java.sun.com/jsp/jstl/functions"
prefix="fn" %>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd">
@@ -50,7 +51,7 @@
<c:choose>
<c:when test="${current.locked > 0}">
<rhn:icon type="errata-security" />
- <a
href="/rhn/systems/details/Overview.do?sid=${current.id}">${current.name}</a>
+ <a
href="/rhn/systems/details/Overview.do?sid=${current.id}">${fn:escapeXml(current.name)}</a>
</c:when>
<c:otherwise>
<%@ include
file="/WEB-INF/pages/common/fragments/systems/system_list_fragment.jspf" %>