commit d9c8bbd56a9c76a111f9441871e79516c521aa75
author Scott Main <smain@google.com> Thu Feb 09 15:57:09 2012 -0800
committer Scott Main <smain@google.com> Thu Feb 09 15:57:09 2012 -0800
tree c47424cb281625510b861ccf6dc3a220900121ab
parent 1c66faab73b2ce54bfe362f3c051ce95ed89fb22

docs: fix xss issue
bug 5125642

Change-Id: I326b619643e3b3de20aa9303e92c9218fdfe50f7

docs/html/sdk/download.jd

diff --git a/docs/html/sdk/download.jd b/docs/html/sdk/download.jd
index 44fe5e4..af25609 100644
--- a/docs/html/sdk/download.jd
+++ b/docs/html/sdk/download.jd
@@ -52,7 +52,7 @@
   <script language="javascript">
     var loc = window.location.href;
     if (loc.indexOf('?v=') != -1) {
-      var filename = loc.substring(loc.indexOf('=')+1,loc.length);
+      var filename = loc.substring(loc.indexOf('=')+1,loc.length).replace(/</g,"&lt;").replace(/>/g,"&gt;");
       document.write("File: " + filename);
     }
   </script>