Encode user store properties
%>
<input type="text" name=<%=value%>
id=<%=value%> style="width:95%"
- value="<%=propertyValue%>"/>
+ value="<%=Encode.forHtmlAttribute(propertyValue)%>"/>
<%
}
%>
%>
<input type="text" name=<%=value%>
id=<%=value%> style="width:95%"
- value="<%=propertyValue%>"/>
+ value="<%=Encode.forHtmlAttribute(propertyValue)%>"/>
<%
}
} else {
<input type="hidden" name=<%=value%>
id=<%=value%>
style="width:95%"
- value="<%=propertyValue%>"/>
+ value="<%=Encode.forHtmlAttribute(propertyValue)%>"/>
</td>
<td class="sectionHelp" width="50%" style="display:none;">
%>
<input type="text" name=<%=value%>
id=<%=value%> style="width:95%"
- value="<%=propertyValue%>"/>
+ value="<%=Encode.forHtmlAttribute(propertyValue)%>"/>
<%
}
} else {
'&connectionPassword=' + encodeURIComponent(connectionPassword);
<%if(messageID != null && !"".equals(messageID)) {%>
- url += '&messageID=<%=messageID%>';
+ url += '&messageID=<%=Encode.forUriComponent(messageID)%>';
<%}%>
$.ajax({
