Fixes bug 485701: Angle brackets (< and >) not escaped in HTML formul…

…a alt text
doxygen · Jul 12, 2015 · 08aa01c · 08aa01c
1 parent 23e84ea
commit 08aa01c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/htmldocvisitor.cpp b/src/htmldocvisitor.cpp
@@ -1902,6 +1902,8 @@ void HtmlDocVisitor::filterQuotedCdataAttr(const char* str)
     {
       case '&':  m_t << "&amp;"; break;
       case '"':  m_t << "&quot;"; break;
+      case '<':  m_t << "&lt;"; break;
+      case '>':  m_t << "&gt;"; break;
        // For SGML compliance, and given the SGML declaration for HTML syntax,
        // it's enough to replace these two, provided that the declaration
        // for the HTML version we generate (and as supported by the browser)