Escape exception message for HTML display

DatekWireless · Mar 27, 2023 · 6d31e11 · 6d31e11
1 parent 45d046a
commit 6d31e11
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -7,7 +7,7 @@ plugins {
 }
 
 group 'no.datek'
-version '0.2.0'
+version '0.2.1'
 final String JRUBY_VERSION = '9.3.6.0';
 
 repositories {

diff --git a/src/main/resources/ruby/slim_helper.rb b/src/main/resources/ruby/slim_helper.rb
@@ -146,7 +146,7 @@ def params.[](key)
       #{e.backtrace.join("\n")}
     HTML
     LOG.error message
-    "<h1>Whoops!</h1><pre>#{message}</pre>"
+    "<h1>Whoops!</h1><pre>#{CGI.escapeHTML(message)}</pre>"
   end
 
   # self in this context is the Struct with the context variables