From dfcc354ccb5ae59ac405c7748a015d46828095d8 Mon Sep 17 00:00:00 2001
From: Gonzalo Gallotti <gonzalogallotti@gmail.com>
Date: Thu, 27 Oct 2022 14:45:32 -0300
Subject: [PATCH] #Fix: Sanitize SPA JSON response within HTML response in
 order to avoid <script> parsing conflicts. Issue: 99580

---
 java/src/main/java/com/genexus/internet/HttpContext.java | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/java/src/main/java/com/genexus/internet/HttpContext.java b/java/src/main/java/com/genexus/internet/HttpContext.java
index daf7886c0..4d356e9c3 100644
--- a/java/src/main/java/com/genexus/internet/HttpContext.java
+++ b/java/src/main/java/com/genexus/internet/HttpContext.java
@@ -22,6 +22,7 @@
 import com.genexus.webpanels.GXWebObjectBase;
 import com.genexus.webpanels.WebSession;
 
+import com.genexus.webpanels.WebUtils;
 import json.org.json.IJsonFormattable;
 import json.org.json.JSONArray;
 import json.org.json.JSONException;
@@ -943,7 +944,7 @@ public void SendState()
 		AddStylesheetsToLoad();
 		if (isSpaRequest())
 		{
-			writeTextNL("<script>gx.ajax.saveJsonResponse(" + getJSONResponse() + ");</script>");
+			writeTextNL("<script>gx.ajax.saveJsonResponse(" + WebUtils.htmlEncode(JSONObject.quote(getJSONResponse()), true) + ");</script>");
 		}
 		else
 		{