Merge "Fix html injection in Autofill confirmation dialog" into tm-qpr-dev

This commit is contained in:
TreeHugger Robot
2023-01-11 11:05:07 +00:00
committed by Android (Google) Code Review

View File

@@ -243,7 +243,7 @@ public class DefaultAutofillPicker extends DefaultAppPickerFragment {
} }
final CharSequence appName = appInfo.loadLabel(); final CharSequence appName = appInfo.loadLabel();
final String message = getContext().getString( final String message = getContext().getString(
R.string.autofill_confirmation_message, appName); R.string.autofill_confirmation_message, Html.escapeHtml(appName));
return Html.fromHtml(message); return Html.fromHtml(message);
} }