Repository: wicket
Updated Branches:
  refs/heads/wicket-1.5.x ec4775541 -> 149cc36f3


Escape the value of the hidden field holding the focused element id


Project: http://git-wip-us.apache.org/repos/asf/wicket/repo
Commit: http://git-wip-us.apache.org/repos/asf/wicket/commit/149cc36f
Tree: http://git-wip-us.apache.org/repos/asf/wicket/tree/149cc36f
Diff: http://git-wip-us.apache.org/repos/asf/wicket/diff/149cc36f

Branch: refs/heads/wicket-1.5.x
Commit: 149cc36f30bcd3b31b727941f701e12ecbe3440f
Parents: ec47755
Author: Martin Tzvetanov Grigorov <[email protected]>
Authored: Wed Sep 3 17:34:56 2014 +0300
Committer: Martin Tzvetanov Grigorov <[email protected]>
Committed: Wed Sep 3 17:34:56 2014 +0300

----------------------------------------------------------------------
 .../markup/html/repeater/data/table/filter/FilterForm.java         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/wicket/blob/149cc36f/wicket-extensions/src/main/java/org/apache/wicket/extensions/markup/html/repeater/data/table/filter/FilterForm.java
----------------------------------------------------------------------
diff --git 
a/wicket-extensions/src/main/java/org/apache/wicket/extensions/markup/html/repeater/data/table/filter/FilterForm.java
 
b/wicket-extensions/src/main/java/org/apache/wicket/extensions/markup/html/repeater/data/table/filter/FilterForm.java
index 30a019b..09b1d8e 100644
--- 
a/wicket-extensions/src/main/java/org/apache/wicket/extensions/markup/html/repeater/data/table/filter/FilterForm.java
+++ 
b/wicket-extensions/src/main/java/org/apache/wicket/extensions/markup/html/repeater/data/table/filter/FilterForm.java
@@ -70,7 +70,7 @@ public class FilterForm<T> extends Form<T>
                getResponse().write(
                        String.format(
                                "<div style='display:inline'><input 
type=\"hidden\" name=\"%s\" id=\"%s\" value=\"%s\"/></div>",
-                               id, id, value));
+                               id, id, Strings.escapeMarkup(value)));
        }
 
        /**

Reply via email to