Improving the JSP encoding

wso2 · Jan 10, 2025 · 9bea567 · 9bea567
1 parent aa26213
commit 9bea567
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/...tity.application.mgt.ui/src/main/resources/web/application/configure-service-provider.jsp b/...tity.application.mgt.ui/src/main/resources/web/application/configure-service-provider.jsp
@@ -1211,8 +1211,8 @@
     function deleteClaimRow(obj) {
         if ($('input:radio[name=claim_dialect]:checked').val() == "custom") {
             if ($(obj).parent().parent().find('input.spClaimVal').val().length > 0) {
-                $('#roleClaim option[value="' + $(obj).parent().parent().find('input.spClaimVal').val() + '"]').remove();
-                $('#subject_claim_uri option[value="' + $(obj).parent().parent().find('input.spClaimVal').val() + '"]').remove();
+               $('#roleClaim option[value="' + encodeForHTML($(obj).parent().parent().find('input.spClaimVal').val()) + '"]').remove();
+                $('#subject_claim_uri option[value="' + encodeForHTML($(obj).parent().parent().find('input.spClaimVal').val()) + '"]').remove();
             }
         }