#91 escape HTML

yegor256 · May 5, 2019 · 6d95e20 · 6d95e20
1 parent 2ab9aa2
commit 6d95e20
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/main/java/io/wring/dynamo/DyEvent.java b/src/main/java/io/wring/dynamo/DyEvent.java
@@ -41,6 +41,7 @@
 import java.util.regex.Matcher;
 import java.util.regex.Pattern;
 import javax.xml.bind.DatatypeConverter;
+import org.apache.commons.text.StringEscapeUtils;
 import org.xembly.Directive;
 import org.xembly.Directives;
 import org.xembly.Xembler;
@@ -142,7 +143,7 @@ private static String html(final CharSequence text) {
             );
         }
         mtr.appendTail(out);
-        return out.toString();
+        return StringEscapeUtils.escapeHtml4(out.toString());
     }
 
 }