Merge "ClipData: html attribute values should always be escaped" into jb-mr1-dev

This commit is contained in:
Nick Kralevich
2012-07-27 14:46:19 -07:00
committed by Android (Google) Code Review

View File

@@ -563,7 +563,7 @@ public class ClipData implements Parcelable {
private String uriToHtml(String uri) { private String uriToHtml(String uri) {
StringBuilder builder = new StringBuilder(256); StringBuilder builder = new StringBuilder(256);
builder.append("<a href=\""); builder.append("<a href=\"");
builder.append(uri); builder.append(Html.escapeHtml(uri));
builder.append("\">"); builder.append("\">");
builder.append(Html.escapeHtml(uri)); builder.append(Html.escapeHtml(uri));
builder.append("</a>"); builder.append("</a>");