From ce24b75c8185e723ea13bcd0ec8d299cbbefae8b Mon Sep 17 00:00:00 2001
From: Julien Lancelot <julien.lancelot@gmail.com>
Date: Thu, 29 Aug 2013 17:11:31 +0200
Subject: [PATCH] SONAR-4582 The project's name should be escaped in the GWT
 design component of the package tangle index page

---
 .../webapp/WEB-INF/app/views/resource/_extension.html.erb    | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/sonar-server/src/main/webapp/WEB-INF/app/views/resource/_extension.html.erb b/sonar-server/src/main/webapp/WEB-INF/app/views/resource/_extension.html.erb
index 6eee7673dda..132de66a7c3 100644
--- a/sonar-server/src/main/webapp/WEB-INF/app/views/resource/_extension.html.erb
+++ b/sonar-server/src/main/webapp/WEB-INF/app/views/resource/_extension.html.erb
@@ -6,10 +6,11 @@
     <% if @extension.isGwt() %>
       <div id="gwtpage"> </div>
       <script>
-        loadGWT('<%= @extension.getId() -%>', <%= @resource.id -%>,'<%= @resource.key -%>', '<%= @resource.name -%>', '<%= @resource.scope -%>', '<%= @resource.qualifier -%>', '<%= @resource.language -%>');
+        loadGWT('<%= @extension.getId() -%>', <%= @resource.id -%>,'<%= escape_javascript(h(@resource.key)) -%>', '<%= escape_javascript(h(@resource.name)) -%>',
+            '<%= @resource.scope -%>', '<%= @resource.qualifier -%>', '<%= escape_javascript(h(@resource.language)) -%>');
       </script>
     <% elsif @extension.getTarget() # ruby on rails page %>
       <%= render :inline => @extension.getTarget().getTemplate() -%>
     <% end %>
   </div>
-</div>
\ No newline at end of file
+</div>
-- 
2.39.5