[SECURITY-2886]

jenkinsci · Sep 21, 2022 · 84f41d2 · 84f41d2
1 parent 6c69fa2
commit 84f41d2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/src/main/resources/lib/layout/helpIcon.jelly b/core/src/main/resources/lib/layout/helpIcon.jelly
@@ -19,7 +19,7 @@
   <j:if test="${attrs.iconSize != null}">
     <j:set var="iconSize" value="icon-${iconSize}"/>
   </j:if>
-  <l:icon tooltip="${tooltip}"
+  <l:icon tooltip="${h.htmlAttributeEscape(tooltip)}"
              class="${class} ${iconSize}"
              src="symbol-help-circle" />
 </j:jelly>