Branch: refs/heads/stable-16.0.x Home: https://github.com/xwiki/xwiki-platform Commit: 7e238f5708b557d53cce05a62d3750262edc6246 https://github.com/xwiki/xwiki-platform/commit/7e238f5708b557d53cce05a62d375... Author: pjeanjean <[email protected]> Date: 2024-01-24 (Wed, 24 Jan 2024) Changed paths: M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/AttachmentIT.java A xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/resources/AttachmentIT/<strong>EscapedAttachment.txt M xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/widgets/upload.js Log Message: ----------- XWIKI-19611: Improve filename escaping in attachment upload * Use escapeHTML() when displaying filenames in upload.js * Add a test in AttachmentIT to check for proper HTML escaping during upload (cherry picked from commit 910a5018a50039e8b24556573dfe342f143ef949)