From 4b44a960c1cbd6b1702fd50d620af29f5b3ee045 Mon Sep 17 00:00:00 2001 From: Joe Feise Date: Fri, 7 Apr 2023 11:09:53 -0500 Subject: [PATCH] sdk: Escape network SSID and name when writing profiles.xml SSIDs can contain ampersands, e.g., "V6 Cafe & Gift Shop". The & and possibly other special chars need to be escaped when writing profiles.xml. Change-Id: Iffef33de22c37d8cb4b5048b92c9ef9c77e18819 --- sdk/src/java/lineageos/app/Profile.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/sdk/src/java/lineageos/app/Profile.java b/sdk/src/java/lineageos/app/Profile.java index 5a59e617..b06e0565 100755 --- a/sdk/src/java/lineageos/app/Profile.java +++ b/sdk/src/java/lineageos/app/Profile.java @@ -295,11 +295,11 @@ public final class Profile implements Parcelable, Comparable { builder.append(" "); builder.append(getIdType(mType)); builder.append("=\""); - builder.append(mId); + builder.append(TextUtils.htmlEncode(mId)); builder.append("\" state=\""); builder.append(mState); builder.append("\" name=\""); - builder.append(mName); + builder.append(TextUtils.htmlEncode(mName)); builder.append("\">\n");