escape special xml characters

cryptomator · Jan 14, 2025 · 62236f4 · 62236f4
1 parent a76717b
commit 62236f4
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/src/main/java/org/cryptomator/linux/quickaccess/DolphinPlaces.java b/src/main/java/org/cryptomator/linux/quickaccess/DolphinPlaces.java
@@ -71,7 +71,7 @@ EntryAndConfig addEntryToConfig(String config, Path target, String displayName)
 			int insertIndex = config.lastIndexOf("</xbel"); //cannot be -1 due to validation; we do not match the whole end tag, since between tag name and closing bracket can be whitespaces
 			var adjustedConfig = config.substring(0, insertIndex) //
 					+ "\n" //
-					+ ENTRY_TEMPLATE.formatted(target.toUri(), displayName, id).indent(1) //
+					+ ENTRY_TEMPLATE.formatted(target.toUri(), escapeXML(displayName), id).indent(1) //
 					+ "\n" //
 					+ config.substring(insertIndex);
 			return new EntryAndConfig(new DolphinPlacesEntry(id), adjustedConfig);
@@ -80,6 +80,12 @@ EntryAndConfig addEntryToConfig(String config, Path target, String displayName)
 		}
 	}
 
+	private String escapeXML(String s) {
+		return s.replace("&","&amp;") //
+				.replace("<","&lt;") //
+				.replace(">","&gt;");
+	}
+
 	private class DolphinPlacesEntry extends FileConfiguredQuickAccessEntry implements QuickAccessEntry {
 
 		private final String id;