@@ -31,21 +31,21 @@ public class KnowledgeControlBase extends Control {
3131 private static final String MARKDOWN_SAMPLE = "/org/support/project/knowledge/markdown/sample_markdown.md" ;
3232
3333 protected String setViewParam () {
34- List <LabelValue > paramsArray = new ArrayList <>();
35- paramsArray .add (new LabelValue ("offset" , getParamWithDefault ("offset" , "" )));
36- paramsArray .add (new LabelValue ("keyword" , getParamWithDefault ("keyword" , "" )));
37- paramsArray .add (new LabelValue ("tag" , getParamWithDefault ("tag" , "" )));
38- paramsArray .add (new LabelValue ("tagNames" , getParamWithDefault ("tagNames" , "" )));
39- paramsArray .add (new LabelValue ("group" , getParamWithDefault ("group" , "" )));
40- paramsArray .add (new LabelValue ("groupNames" , getParamWithDefault ("groupNames" , "" )));
41- paramsArray .add (new LabelValue ("user" , getParamWithDefault ("user" , "" )));
42- paramsArray .add (new LabelValue ("creators" , getParamWithDefault ("creators" , "" )));
43- String [] templates = getParam ("template" , String [].class );
44- if (templates != null ) {
45- for (String template : templates ) {
46- paramsArray .add (new LabelValue ("template" , template ));
47- }
34+ List <LabelValue > paramsArray = new ArrayList <>();
35+ paramsArray .add (new LabelValue ("offset" , getParamWithDefault ("offset" , "" )));
36+ paramsArray .add (new LabelValue ("keyword" , getParamWithDefault ("keyword" , "" )));
37+ paramsArray .add (new LabelValue ("tag" , getParamWithDefault ("tag" , "" )));
38+ paramsArray .add (new LabelValue ("tagNames" , getParamWithDefault ("tagNames" , "" )));
39+ paramsArray .add (new LabelValue ("group" , getParamWithDefault ("group" , "" )));
40+ paramsArray .add (new LabelValue ("groupNames" , getParamWithDefault ("groupNames" , "" )));
41+ paramsArray .add (new LabelValue ("user" , getParamWithDefault ("user" , "" )));
42+ paramsArray .add (new LabelValue ("creators" , getParamWithDefault ("creators" , "" )));
43+ String [] templates = getParam ("template" , String [].class );
44+ if (templates != null ) {
45+ for (String template : templates ) {
46+ paramsArray .add (new LabelValue ("template" , template ));
4847 }
48+ }
4949 StringBuilder params = new StringBuilder ();
5050 boolean append = false ;
5151 for (LabelValue labelValue : paramsArray ) {
@@ -56,10 +56,12 @@ protected String setViewParam() {
5656 } else {
5757 params .append ('&' );
5858 }
59- params .append (labelValue .getLabel ()).append ("=" ).append (labelValue .getValue ());
59+ params .append (HtmlUtils .escapeHTML (labelValue .getLabel ()))
60+ .append ("=" )
61+ .append (HtmlUtils .escapeHTML (labelValue .getValue ()));
6062 }
6163 }
62- setAttribute ("params" , HtmlUtils . escapeHTML ( params .toString () ));
64+ setAttribute ("params" , params .toString ());
6365 return params .toString ();
6466 }
6567
0 commit comments