[cxf] branch master updated: Escape the services listing stylesheet path (#694)

[coheigea]

This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cxf.git


The following commit(s) were added to refs/heads/master by this push:
     new 3c23fa3  Escape the services listing stylesheet path (#694)
3c23fa3 is described below

commit 3c23fa3b3c24c328bbc6d71c509668cb10b0ea31
Author: Colm O hEigeartaigh <cohei...@users.noreply.github.com>
AuthorDate: Wed Sep 23 07:33:04 2020 +0100

    Escape the services listing stylesheet path (#694)
---
 .../cxf/transport/servlet/servicelist/FormattedServiceListWriter.java   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/rt/transports/http/src/main/java/org/apache/cxf/transport/servlet/servicelist/FormattedServiceListWriter.java
 
b/rt/transports/http/src/main/java/org/apache/cxf/transport/servlet/servicelist/FormattedServiceListWriter.java
index c453e5a..9cc2cb4 100644
--- 
a/rt/transports/http/src/main/java/org/apache/cxf/transport/servlet/servicelist/FormattedServiceListWriter.java
+++ 
b/rt/transports/http/src/main/java/org/apache/cxf/transport/servlet/servicelist/FormattedServiceListWriter.java
@@ -42,7 +42,7 @@ public class FormattedServiceListWriter implements 
ServiceListWriter {
                                       String title,
                                       boolean showForeignContexts,
                                       Bus bus) {
-        this.styleSheetPath = styleSheetPath;
+        this.styleSheetPath = StringEscapeUtils.escapeHtml4(styleSheetPath);
         this.title = title;
         this.showForeignContexts = showForeignContexts;
         this.bus = bus;