You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@myfaces.apache.org by lu...@apache.org on 2012/10/08 04:26:14 UTC

svn commit: r1395438 - /myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/ext/HtmlCheckboxRenderer.java

Author: lu4242
Date: Mon Oct  8 02:26:13 2012
New Revision: 1395438

URL: http://svn.apache.org/viewvc?rev=1395438&view=rev
Log:
TOMAHAWK-1637 Potential XSS security issue in FieldsetRenderer (fix small bug)

Modified:
    myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/ext/HtmlCheckboxRenderer.java

Modified: myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/ext/HtmlCheckboxRenderer.java
URL: http://svn.apache.org/viewvc/myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/ext/HtmlCheckboxRenderer.java?rev=1395438&r1=1395437&r2=1395438&view=diff
==============================================================================
--- myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/ext/HtmlCheckboxRenderer.java (original)
+++ myfaces/tomahawk/trunk/core/src/main/java/org/apache/myfaces/renderkit/html/ext/HtmlCheckboxRenderer.java Mon Oct  8 02:26:13 2012
@@ -314,7 +314,7 @@ public class HtmlCheckboxRenderer
         if (pageDirectionLayout)
             writer.startElement(HTML.TR_ELEM, selectMany);
         writer.startElement(HTML.TD_ELEM, selectMany);
-        writer.writeText(selectItemGroup.getLabel());
+        writer.writeText(selectItemGroup.getLabel(), null);
         writer.endElement(HTML.TD_ELEM);
         
         if (pageDirectionLayout) {