From f199ba255aab32cb4e456a01d11afa25cf3107f2 Mon Sep 17 00:00:00 2001
From: Gonzalo Gallotti <gonzalogallotti@gmail.com>
Date: Thu, 27 Oct 2022 14:45:39 -0300
Subject: [PATCH] #Fix: Sanitize SPA JSON response within HTML response in
 order to avoid <script> parsing conflicts. Issue: 99580

---
 dotnet/src/dotnetframework/GxClasses/Middleware/GXHttp.cs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/dotnet/src/dotnetframework/GxClasses/Middleware/GXHttp.cs b/dotnet/src/dotnetframework/GxClasses/Middleware/GXHttp.cs
index 7c8369154..911c8d066 100644
--- a/dotnet/src/dotnetframework/GxClasses/Middleware/GXHttp.cs
+++ b/dotnet/src/dotnetframework/GxClasses/Middleware/GXHttp.cs
@@ -34,6 +34,7 @@ namespace GeneXus.Http
 	using GeneXus.Web.Security;
 	using System.Linq;
 	using System.Reflection.PortableExecutable;
+	using System.Web;
 #else
 	using System.Web;
 	using System.Web.UI;
@@ -1568,7 +1569,7 @@ protected void SendState()
 				context.httpAjaxContext.AddStylesHidden();
 				if (IsSpaRequest())
 				{
-					context.WriteHtmlTextNl("<script>gx.ajax.saveJsonResponse(" + context.getJSONResponse() + ");</script>");
+					context.WriteHtmlTextNl("<script>gx.ajax.saveJsonResponse('" + GXUtil.HtmlEncodeInputValue(HttpUtility.JavaScriptStringEncode(context.getJSONResponse())) + "');</script>");
 				}
 				else
 				{