update role-mgt.jsp
HTMLEncode variable
%>
<tr>
- <td class="leftCol-big" style="padding-right: 0 !important;"><%=key%></td>
+ <td class="leftCol-big" style="padding-right: 0 !important;"><%=Encode.forHtml(key)%></td>
<td>
<input type="text" readonly=true name="<%=UserAdminUIConstants.ROLE_COUNT%>"
value="<%=Encode.forHtmlAttribute(value)%>" />
