Protect History Display
[aaf/authz.git] / auth / auth-gui / src / main / java / org / onap / aaf / auth / gui / pages / PermHistory.java
index 64a0db1..b7a9960 100644 (file)
@@ -207,11 +207,11 @@ public class PermHistory extends Page {
                                                                for (Item i : histItems) {
                                                                        String user = i.getUser();
                                                                        AbsCell userCell = new TextCell(user);
-                                                                       
+                                                                       String memo = i.getMemo().replace("<script>", "&lt;script&gt;").replace("</script>", "&lt;/script&gt;");
                                                                        rv.add(new AbsCell[] {
                                                                                        new TextCell(i.getTimestamp().toGregorianCalendar().getTime().toString()),
                                                                                        userCell,
-                                                                                       new TextCell(i.getMemo())
+                                                                                       new TextCell(memo)
                                                                        });
                                                                }