[SECURITY-2287] avoid xss storage for server name

Signed-off-by: Olivier Lamy <olamy@apache.org>
jenkinsci · Feb 9, 2022 · edf4e98 · edf4e98
1 parent f3f6909
commit edf4e98
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/resources/jenkins/plugins/publish_over_ssh/BapSshPublisherPlugin/config.jelly b/src/main/resources/jenkins/plugins/publish_over_ssh/BapSshPublisherPlugin/config.jelly
@@ -37,7 +37,7 @@
         <script type="text/javascript" src="${rootURL}/plugin/publish-over-ssh/js/pos.js" />
         <script type="text/javascript">
             <j:forEach var="config" items="${descriptor.hostConfigurations}">
-                exec_disabled['${config.name}'] = ${config.effectiveDisableExec};
+                exec_disabled["${config.name}"] = ${config.effectiveDisableExec};
             </j:forEach>
         </script>
     </st:once>