empire-db git commit: EMPIREDB-235 escape HTML

[doebele]

Repository: empire-db
Updated Branches:
  refs/heads/master c2ec6bf42 -> ffe2eb52a


EMPIREDB-235
escape HTML

Project: http://git-wip-us.apache.org/repos/asf/empire-db/repo
Commit: http://git-wip-us.apache.org/repos/asf/empire-db/commit/ffe2eb52
Tree: http://git-wip-us.apache.org/repos/asf/empire-db/tree/ffe2eb52
Diff: http://git-wip-us.apache.org/repos/asf/empire-db/diff/ffe2eb52

Branch: refs/heads/master
Commit: ffe2eb52acb952fb478cb5d39e2de2cc2357cf4d
Parents: c2ec6bf
Author: Rainer Döbele <doeb...@esteam.de>
Authored: Sat Mar 5 18:31:43 2016 +0100
Committer: Rainer Döbele <doeb...@esteam.de>
Committed: Sat Mar 5 18:31:43 2016 +0100

----------------------------------------------------------------------
 .../org/apache/empire/jsf2/controls/InputControl.java  | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/empire-db/blob/ffe2eb52/empire-db-jsf2/src/main/java/org/apache/empire/jsf2/controls/InputControl.java
----------------------------------------------------------------------
diff --git 
a/empire-db-jsf2/src/main/java/org/apache/empire/jsf2/controls/InputControl.java
 
b/empire-db-jsf2/src/main/java/org/apache/empire/jsf2/controls/InputControl.java
index 0312294..bbeccdc 100644
--- 
a/empire-db-jsf2/src/main/java/org/apache/empire/jsf2/controls/InputControl.java
+++ 
b/empire-db-jsf2/src/main/java/org/apache/empire/jsf2/controls/InputControl.java
@@ -579,7 +579,18 @@ public abstract class InputControl
      */
     protected String escapeHTML(String text)
     {
-        // TODO
+        if (text==null || text.length()==0)
+            return text;
+        // &amp;
+        if (text.indexOf('&')>=0)
+            text = StringUtils.replaceAll(text, "&", "&amp;");
+        // &lt;
+        if (text.indexOf('<')>=0)
+            text = StringUtils.replaceAll(text, "<", "&lt;");
+        // &gt;
+        if (text.indexOf('>')>=0)
+            text = StringUtils.replaceAll(text, ">", "&gt;");
+        // done
         return text;
     }