LibWebView: Escape HTML entities in the Task Manager process titles

SerenityOS · May 12, 2024 · 765889e · 765889e
1 parent 3f54bb8
commit 765889e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Userland/Libraries/LibWebView/ProcessManager.cpp b/Userland/Libraries/LibWebView/ProcessManager.cpp
@@ -211,7 +211,7 @@ String ProcessManager::generate_html()
         builder.append("<td>"sv);
         builder.append(WebView::process_name_from_type(process.type));
         if (process.title.has_value())
-            builder.appendff(" - {}", *process.title);
+            builder.appendff(" - {}", escape_html_entities(*process.title));
         builder.append("</td>"sv);
         builder.append("<td>"sv);
         builder.append(MUST(String::number(process.pid)));