From 075f5bdae4153bcd7edf4be804fbef617071ae2c Mon Sep 17 00:00:00 2001
From: Lukasz Lenart <lukaszlenart@apache.org>
Date: Wed, 12 Sep 2012 06:17:24 +0000
Subject: [PATCH] Sanitise input variables

git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1383793 13f79535-47bb-0310-9956-ffa450edef68
---
 .../main/java/org/apache/struts2/showcase/model/Skill.java  | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/apps/showcase/src/main/java/org/apache/struts2/showcase/model/Skill.java b/apps/showcase/src/main/java/org/apache/struts2/showcase/model/Skill.java
index e105ba0db..1f2d831d1 100644
--- a/apps/showcase/src/main/java/org/apache/struts2/showcase/model/Skill.java
+++ b/apps/showcase/src/main/java/org/apache/struts2/showcase/model/Skill.java
@@ -20,6 +20,8 @@
  */
 package org.apache.struts2.showcase.model;
 
+import org.apache.commons.lang3.StringEscapeUtils;
+
 import java.io.Serializable;
 
 /**
@@ -47,7 +49,7 @@ public class Skill implements IdEntity {
     }
 
     public void setName(String name) {
-        this.name = name;
+        this.name = StringEscapeUtils.escapeEcmaScript(StringEscapeUtils.escapeHtml4(name));
     }
 
     public String getDescription() {
@@ -55,7 +57,7 @@ public class Skill implements IdEntity {
     }
 
     public void setDescription(String description) {
-        this.description = description;
+        this.description = StringEscapeUtils.escapeEcmaScript(StringEscapeUtils.escapeHtml4(description));
     }
 
     public Serializable getId() {