XWIKI-21107: The Pretty Name on Wiki Descriptor is not escaped

fe9f2363 · Vincent Massol · c5490256 · fe9f2363
Commit fe9f2363 authored 8 months ago by Vincent Massol
--- a/xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/drawer_macros.vm
+++ b/xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/drawer_macros.vm
@@ -71,5 +71,5 @@
 * Display a category header in the drawer
 *#
 #macro(drawerCategoryHeader $title)
-  <li class="drawer-category-header"><hr class="hidden"/>$title</li>
+  <li class="drawer-category-header"><hr class="hidden"/>$escapetool.xml($title)</li>
 #end