IDEA-105372 HTML injection into application messages

This commit is contained in:
andrey.zaytsev
2013-04-16 23:31:27 +04:00
parent ec372087af
commit 1a1e46f2f8
@@ -412,7 +412,7 @@ public class UsageViewManagerImpl extends UsageViewManager {
if (notFoundActions.isEmpty()) {
notifyByFindBalloon(createGotToOptionsListener(mySearchFor),
MessageType.INFO, myProcessPresentation, message, createOptionsHtml());
MessageType.INFO, myProcessPresentation, StringUtil.escapeXml(message), createOptionsHtml());
findStartedBalloonShown.set(false);
}
else {