[JENKINS-31162] To prevent XSS

jenkinsci · Apr 4, 2016 · 6bea194 · 6bea194
1 parent e99d4bc
commit 6bea194
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...src/main/resources/org/jenkinsci/plugins/workflow/job/WorkflowJob/newInstanceDetail.jelly b/...src/main/resources/org/jenkinsci/plugins/workflow/job/WorkflowJob/newInstanceDetail.jelly
@@ -25,5 +25,5 @@
   -->
 
 <j:jelly xmlns:j="jelly:core">
-  ${it.description}
+  <j:out value="${it.description}"/>
 </j:jelly>