SEC-967: TextUtils.java does not escape ampersand character

http://jira.springframework.org/browse/SEC-967. Added escaping of '&' character
2008-08-29 12:01:45 +00:00 · 2008-08-29 12:01:45 +00:00 · 4e2d6f8b2e
parent d781deffe7
commit 4e2d6f8b2e
1 changed files with 2 additions and 0 deletions
--- a/core/src/main/java/org/springframework/security/util/TextUtils.java
+++ b/core/src/main/java/org/springframework/security/util/TextUtils.java
@ -26,6 +26,8 @@ public abstract class TextUtils {
                sb.append("&#034;");
            } else if (c == '\'') {
                sb.append("&#039;");
+            } else if (c == '&') {
+                sb.append("&amp;");
            } else {
                sb.append(c);
            }