From c338ede06dede2cf3fd3fdd78f82ad6e010f60e4 Mon Sep 17 00:00:00 2001
From: "Donald J. Brown" <mrdon@apache.org>
Date: Sat, 16 Feb 2008 13:06:12 +0000
Subject: [PATCH] Escaping HTML for values WW-2319

git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@628287 13f79535-47bb-0310-9956-ffa450edef68
---
 core/src/main/resources/template/simple/debug.ftl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/core/src/main/resources/template/simple/debug.ftl b/core/src/main/resources/template/simple/debug.ftl
index 22f74fcc5..1664bc381 100644
--- a/core/src/main/resources/template/simple/debug.ftl
+++ b/core/src/main/resources/template/simple/debug.ftl
@@ -55,7 +55,7 @@
         <#list stackObject.value.keySet() as propertyName>
             <#if renderRow==true></tr><tr><#else> <#assign renderRow=false> </#if>
             <td bgcolor="<#if (index % 2) == 0>#BBBBBB<#else>#CCCCCC</#if>">${propertyName}</td>
-            <td bgcolor="<#if (index % 2) == 0>#BBBBBB<#else>#CCCCCC</#if>"><#if stackObject.value.get(propertyName)?exists>${stackObject.value.get(propertyName).toString()}<#else>null</#if></td>
+            <td bgcolor="<#if (index % 2) == 0>#BBBBBB<#else>#CCCCCC</#if>"><#if stackObject.value.get(propertyName)?exists>${stackObject.value.get(propertyName).toString()?html}<#else>null</#if></td>
     </tr>
             <#assign index= index + 1>
         </#list>
@@ -73,7 +73,7 @@
     <#assign index=1>
     <#list stack.context.keySet() as contextKey>
     <tr bgcolor="<#if (index % 2) == 0>#BBBBBB<#else>#CCCCCC</#if>">
-        <td>${contextKey}</td><td><#if stack.context.get(contextKey)?exists>${stack.context.get(contextKey).toString()}<#else>null</#if></td>
+        <td>${contextKey}</td><td><#if stack.context.get(contextKey)?exists>${stack.context.get(contextKey).toString()?html}<#else>null</#if></td>
     </tr>
         <#assign index= index + 1>
     </#list>