Merge pull request #1387 from tpage-alfresco/develop

Add HTML encoding in AlfBreadcrumb to avoid XSS issues.
Alfresco · Oct 3, 2017 · 1ceb495 · 1ceb495
2 parents b45012d + 34fccbd
commit 1ceb495
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/aikau/src/main/resources/alfresco/documentlibrary/AlfBreadcrumb.js b/aikau/src/main/resources/alfresco/documentlibrary/AlfBreadcrumb.js
@@ -104,7 +104,7 @@ define(["dojo/_base/declare",
       postCreate: function alfresco_documentlibrary_AlfBreadcrumb__postCreate() {
          if (this.label)
          {
-            this.breadcrumbNode.innerHTML = this.message(this.label);
+            this.breadcrumbNode.innerHTML = this.encodeHTML(this.message(this.label));
          }
       },