docs: fix xss issue

bug 5125642 Change-Id: I326b619643e3b3de20aa9303e92c9218fdfe50f7
2012-02-09 15:57:09 -08:00
parent 1c66faab73
commit d9c8bbd56a
1 changed files with 1 additions and 1 deletions
--- a/docs/html/sdk/download.jd
+++ b/docs/html/sdk/download.jd
@@ -52,7 +52,7 @@ onclick="submit()" />
  <script language="javascript">
    var loc = window.location.href;
    if (loc.indexOf('?v=') != -1) {
-      var filename = loc.substring(loc.indexOf('=')+1,loc.length);
+      var filename = loc.substring(loc.indexOf('=')+1,loc.length).replace(/</g,"&lt;").replace(/>/g,"&gt;");
      document.write("File: " + filename);
    }
  </script>