SECURITY-1928 Fix stored xss (#33)

jenkinsci · Dec 18, 2020 · 99814a0 · 99814a0
1 parent 7f49057
commit 99814a0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/java/hudson/plugins/release/ReleaseWrapper.java b/src/main/java/hudson/plugins/release/ReleaseWrapper.java
@@ -737,7 +737,7 @@ public ReleaseBuildBadgeAction() {
         }
 
         public String getReleaseVersion() {
-            return releaseVersion;
+            return releaseVersion != null ? Util.xmlEscape(releaseVersion) : null;
         }
 
         public String getIconFileName() { return null; }