Skip to content
Permalink
Browse files Browse the repository at this point in the history
escape comment text; fixes #24585
  • Loading branch information
Andrey Kozhushkov committed Mar 24, 2023
1 parent 60163de commit f0ccde2
Showing 1 changed file with 5 additions and 2 deletions.
Expand Up @@ -51,7 +51,9 @@

<!-- COMMENT METADATA -->
<div class="user-comments__comment-metadata">
<span class="user-comments__comment-metadata-creator">#{comment.creator.displayNameEscaped}</span>
<span class="user-comments__comment-metadata-creator">
#{comment.creator.displayNameEscaped}
</span>
<span class="user-comments__comment-metadata-date">#{navigationHelper.getLocalDate(comment.dateCreated)}</span>
</div>

Expand All @@ -77,7 +79,8 @@

<!-- COMMENT TEXT -->
<div class="user-comments__comment-content-text in">
#{comment.displayText}</div>
<h:outputText value="#{comment.displayText}" escape="true" />
</div>

<!-- EDIT COMMENT -->
<ui:fragment
Expand Down

0 comments on commit f0ccde2

Please sign in to comment.