From 1a1e46f2f878f2d946b0df562ef44e56f267ba3d Mon Sep 17 00:00:00 2001
From: "andrey.zaytsev" <andrey.zaytsev@jetbrains.com>
Date: Tue, 16 Apr 2013 15:01:23 +0400
Subject: [PATCH] IDEA-105372 HTML injection into application messages

---
 .../src/com/intellij/usages/impl/UsageViewManagerImpl.java      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/platform/usageView/src/com/intellij/usages/impl/UsageViewManagerImpl.java b/platform/usageView/src/com/intellij/usages/impl/UsageViewManagerImpl.java
index 82d26cd73a2b..93a2b0dab533 100644
--- a/platform/usageView/src/com/intellij/usages/impl/UsageViewManagerImpl.java
+++ b/platform/usageView/src/com/intellij/usages/impl/UsageViewManagerImpl.java
@@ -412,7 +412,7 @@ public class UsageViewManagerImpl extends UsageViewManager {
 
               if (notFoundActions.isEmpty()) {
                 notifyByFindBalloon(createGotToOptionsListener(mySearchFor),
-                                    MessageType.INFO, myProcessPresentation, message, createOptionsHtml());
+                                    MessageType.INFO, myProcessPresentation, StringUtil.escapeXml(message), createOptionsHtml());
                 findStartedBalloonShown.set(false);
               }
               else {