Merge "ClipData: html attribute values should always be escaped" into jb-mr1-dev
This commit is contained in:
committed by
Android (Google) Code Review
commit
89630ec877
@@ -563,7 +563,7 @@ public class ClipData implements Parcelable {
|
|||||||
private String uriToHtml(String uri) {
|
private String uriToHtml(String uri) {
|
||||||
StringBuilder builder = new StringBuilder(256);
|
StringBuilder builder = new StringBuilder(256);
|
||||||
builder.append("<a href=\"");
|
builder.append("<a href=\"");
|
||||||
builder.append(uri);
|
builder.append(Html.escapeHtml(uri));
|
||||||
builder.append("\">");
|
builder.append("\">");
|
||||||
builder.append(Html.escapeHtml(uri));
|
builder.append(Html.escapeHtml(uri));
|
||||||
builder.append("</a>");
|
builder.append("</a>");
|
||||||
|
|||||||
Reference in New Issue
Block a user