Branch: refs/heads/stable-15.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 8b8a2d80529b9a9c038014c1eb6c2adc08069dfd https://github.com/xwiki/xwiki-platform/commit/8b8a2d80529b9a9c038014c1eb6c… Author: pjeanjean &lt;pierre.jeanjean(a)xwiki.com&gt; Date: 2024-01-24 (Wed, 24 Jan 2024) Changed paths: M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/AttachmentIT.java A xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/resources/AttachmentIT/<strong>EscapedAttachment.txt M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/widgets/upload.js Log Message: ----------- XWIKI-19611: Improve filename escaping in attachment upload * Use escapeHTML() when displaying filenames in upload.js * Add a test in AttachmentIT to check for proper HTML escaping during upload (cherry picked from commit 910a5018a50039e8b24556573dfe342f143ef949)