From 4634f88c93b7d3b32ef56be446cf0899ca26e28b Mon Sep 17 00:00:00 2001
From: srosse <none@none>
Date: Fri, 28 Mar 2014 11:06:29 +0100
Subject: [PATCH] OO-805: fix escaping of escaped characters from TinyMCE
---
src/main/java/org/olat/course/nodes/en/ENRunController.java | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/src/main/java/org/olat/course/nodes/en/ENRunController.java b/src/main/java/org/olat/course/nodes/en/ENRunController.java
index 713740b5a3e..9ec3f3c0894 100644
--- a/src/main/java/org/olat/course/nodes/en/ENRunController.java
+++ b/src/main/java/org/olat/course/nodes/en/ENRunController.java
@@ -285,7 +285,9 @@ public class ENRunController extends BasicController implements GenericEventList
listenTo(tableCtr);
tableCtr.addColumnDescriptor(new DefaultColumnDescriptor("grouplist.table.name", 0, CMD_VISIT_CARD, getLocale()));
- tableCtr.addColumnDescriptor(new DefaultColumnDescriptor("grouplist.table.desc", 1, null, getLocale()));
+ DefaultColumnDescriptor descCd = new DefaultColumnDescriptor("grouplist.table.desc", 1, null, getLocale());
+ descCd.setEscapeHtml(EscapeMode.antisamy);
+ tableCtr.addColumnDescriptor(descCd);
tableCtr.addColumnDescriptor(new DefaultColumnDescriptor("grouplist.table.partipiciant", 2, null, getLocale()));
tableCtr.addColumnDescriptor(hasAnyWaitingList,new DefaultColumnDescriptor("grouplist.table.waitingList", 3, null, getLocale()));
DefaultColumnDescriptor stateColdEsc = new DefaultColumnDescriptor("grouplist.table.state", 4, null, getLocale());
@@ -294,7 +296,7 @@ public class ENRunController extends BasicController implements GenericEventList
BooleanColumnDescriptor columnDesc = new BooleanColumnDescriptor("grouplist.table.enroll", 5, CMD_ENROLL_IN_GROUP,
translate(CMD_ENROLL_IN_GROUP), translate("grouplist.table.no_action"));
columnDesc.setSortingAllowed(false);
- tableCtr.addColumnDescriptor(columnDesc);
+ tableCtr.addColumnDescriptor(columnDesc);
tableCtr.addColumnDescriptor(new BooleanColumnDescriptor("grouplist.table.cancel_enroll", 6, CMD_ENROLLED_CANCEL,
translate(CMD_ENROLLED_CANCEL), translate("grouplist.table.no_action")));
return tableCtr;
--
GitLab