encode error output

vladak · vladak · commit 7d2de541efc9 · 2025-08-20T13:01:14.000+02:00
diff --git a/opengrok-web/src/main/webapp/xref.jspf b/opengrok-web/src/main/webapp/xref.jspf
@@ -170,7 +170,7 @@ org.opengrok.indexer.web.QueryParameters"
 <h3 class="error">Error reading file</h3><%
             if (error != null) {
 %>
-<p class="error"><%= error %></p><%
+<p class="error"><%= Util.htmlize(error) %></p><%
             }
         }
     } else if (g == AbstractAnalyzer.Genre.IMAGE) {

Original file line number	Diff line number	Diff line change
`@@ -170,7 +170,7 @@ org.opengrok.indexer.web.QueryParameters"`
`170`	`170`	`<h3 class="error">Error reading file</h3><%`
`171`	`171`	`if (error != null) {`
`172`	`172`	`%>`
`173`		`-<p class="error"><%= error %></p><%`
	`173`	`+<p class="error"><%= Util.htmlize(error) %></p><%`
`174`	`174`	`}`
`175`	`175`	`}`
`176`	`176`	`} else if (g == AbstractAnalyzer.Genre.IMAGE) {`