[SECURITY-641] Escape autocompletion suggestions

jenkinsci · Oct 24, 2017 · f670681 · f670681
1 parent 566a8dd
commit f670681
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/war/src/main/webapp/scripts/hudson-behavior.js b/war/src/main/webapp/scripts/hudson-behavior.js
@@ -712,6 +712,7 @@ var jenkinsRules = {
         };
         ac.prehighlightClassName = "yui-ac-prehighlight";
         ac.animSpeed = 0;
+        ac.formatResult = ac.formatEscapedResult;
         ac.useShadow = true;
         ac.autoSnapContainer = true;
         ac.delimChar = e.getAttribute("autoCompleteDelimChar");