Fixed XSS issue in explorer.

alkacon · Sep 21, 2023 · d965c18 · d965c18
1 parent cf4a966
commit d965c18
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/org/opencms/ui/components/CmsResourceTable.java b/src/org/opencms/ui/components/CmsResourceTable.java
@@ -61,6 +61,7 @@
 import org.opencms.file.CmsPropertyDefinition;
 import org.opencms.file.CmsResource;
 import org.opencms.file.types.I_CmsResourceType;
+import org.opencms.i18n.CmsEncoder;
 import org.opencms.main.CmsException;
 import org.opencms.main.CmsLog;
 import org.opencms.main.OpenCms;
@@ -282,7 +283,7 @@ public String generateDescription(Component source, Object itemId, Object proper
                     } else if (String.class.equals(prop.getType()) || ClassUtils.isPrimitiveOrWrapper(prop.getType())) {
                         Object value = prop.getValue();
                         if (value != null) {
-                            return "" + value;
+                            return CmsEncoder.escapeXml("" + value);
                         }
                     }
                 }