Add HTML encoding in AlfBreadcrumb to avoid XSS issues.

Alfresco · Oct 3, 2017 · 34fccbd · 34fccbd
1 parent b45012d
commit 34fccbd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/aikau/src/main/resources/alfresco/documentlibrary/AlfBreadcrumb.js b/aikau/src/main/resources/alfresco/documentlibrary/AlfBreadcrumb.js
@@ -104,7 +104,7 @@ define(["dojo/_base/declare",
       postCreate: function alfresco_documentlibrary_AlfBreadcrumb__postCreate() {
          if (this.label)
          {
-            this.breadcrumbNode.innerHTML = this.message(this.label);
+            this.breadcrumbNode.innerHTML = this.encodeHTML(this.message(this.label));
          }
       },