Author: jacopoc
Date: Sat Mar 3 02:03:08 2007
New Revision: 514110
URL:
http://svn.apache.org/viewvc?view=rev&rev=514110Log:
Applied patch from Ismail Cansiz (OFBIZ-534) to escape special caracters in text boxes.
Modified:
ofbiz/trunk/framework/widget/src/org/ofbiz/widget/html/HtmlFormRenderer.java
Modified: ofbiz/trunk/framework/widget/src/org/ofbiz/widget/html/HtmlFormRenderer.java
URL:
http://svn.apache.org/viewvc/ofbiz/trunk/framework/widget/src/org/ofbiz/widget/html/HtmlFormRenderer.java?view=diff&rev=514110&r1=514109&r2=514110==============================================================================
--- ofbiz/trunk/framework/widget/src/org/ofbiz/widget/html/HtmlFormRenderer.java (original)
+++ ofbiz/trunk/framework/widget/src/org/ofbiz/widget/html/HtmlFormRenderer.java Sat Mar 3 02:03:08 2007
@@ -31,6 +31,7 @@
import javax.servlet.http.HttpServletResponse;
import org.ofbiz.base.util.Debug;
+import org.ofbiz.base.util.UtilFormatOut;
import org.ofbiz.base.util.UtilHttp;
import org.ofbiz.base.util.UtilProperties;
import org.ofbiz.base.util.UtilValidate;
@@ -230,7 +231,7 @@
String value = modelFormField.getEntry(context, textField.getDefaultValue(context));
if (UtilValidate.isNotEmpty(value)) {
buffer.append(" value=\"");
- buffer.append(value);
+ buffer.append(UtilFormatOut.encodeXmlValue(value));
buffer.append('"');
}