escapeXml

JeffersonLab · Oct 3, 2024 · d94121e · d94121e
1 parent acb787f
commit d94121e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/main/webapp/WEB-INF/views/credited-controls/verification-history.jsp b/src/main/webapp/WEB-INF/views/credited-controls/verification-history.jsp
@@ -66,7 +66,7 @@
                             </tbody>
                         </table>
                         <form id="filter-form" action="${pageContext.request.contextPath}/credited-controls/verification-history" method="get">
-                            <input type="hidden" name="controlVerificationId" value="${param.controlVerificationId}"/>
+                            <input type="hidden" name="controlVerificationId" value="${fn:escapeXml(param.controlVerificationId)}"/>
                             <input type="hidden" id="offset-input" name="offset" value="0"/>
                         </form>
                         <button id="previous-button" type="button" data-offset="${paginator.previousOffset}" value="Previous"${paginator.previous ? '' : ' disabled="disabled"'}>Previous</button>                        

diff --git a/src/main/webapp/WEB-INF/views/permissions/destinations-authorization-history.jsp b/src/main/webapp/WEB-INF/views/permissions/destinations-authorization-history.jsp
@@ -31,7 +31,7 @@
                     <t:permissions-page cebafDestinationList="${cebafDestinationList}" lerfDestinationList="${lerfDestinationList}" isEditable="${false}" isHistory="${true}"/>
                 </c:when>
                 <c:otherwise>
-                    <div class="message-box">No Authorization found with ID: ${param.authorizationId}</div>
+                    <div class="message-box">No Authorization found with ID: ${fn:escapeXml(param.authorizationId)}</div>
                 </c:otherwise>
             </c:choose>
         </section>