LeventeHudak/liferay-portal — pull request #15 by laszlocsontos (2012-12-19 15:20:44+00:00)
Title: [TECHNICAL SUPPORT] LPS-31823 XSS in Search portlet if results are displayed in document for...

Hi Levi,

XSS attack is possible to the Search portlet under certain circumstances (see the LPS for more details).

The other JPSs are properly escaped, so I did not find any other place where I could have put HtmlUtil.escape(...).

Cheers,
Laci.