fixed security bug

This commit is contained in:
anhefti 2022-06-23 15:26:32 +02:00
parent 7fe89e7c39
commit 0b86af5859

View file

@ -97,7 +97,9 @@ public class PasswordInput extends Composite {
SWT.LEFT | SWT.BORDER | (buildPassword ? SWT.PASSWORD : SWT.NONE));
final GridData gridData = new GridData(SWT.FILL, SWT.FILL, true, true);
passwordInput.setLayoutData(gridData);
passwordInput.setText(value != null ? value : StringUtils.EMPTY);
passwordInput.setText(value != null
? Utils.escapeHTML_XML_EcmaScript(value)
: StringUtils.EMPTY);
if (!buildPassword) {
passwordInput.setEditable(false);
} else {