Item13302: encode double quotes

foswiki · Mar 10, 2015 · 385b7c1 · 385b7c1
1 parent 0fe87a4
commit 385b7c1
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/core/lib/Foswiki/UI/ChangeForm.pm b/core/lib/Foswiki/UI/ChangeForm.pm
@@ -109,9 +109,9 @@ sub generate {
     $page = $topicObject->expandMacros($page);
     $page = $topicObject->renderTML($page);
 
-    $text = '<input type="hidden" name="text" value="'
-      . scalar( $q->param('text') ) . '"/>';
-
+    my $val = scalar( $q->param('text') );
+    $val =~ s/\"/&quot;/g;
+    $text = "<input type=\"hidden\" name=\"text\" value=\"$val\" />";
     $page =~ s/%TEXT%/$text/g;
 
     return $page;