zsigmondrab/liferay-portal — pull request #27 by vilmospapp (2013-03-20 15:54:27+00:00)
Title: [TECHNICAL SUPPORT] LPS-33862 Escaped URL attribute to avoid XSS execution

Hi Zsigmond,

In this issue I simply escape the attribute of an image src as parameters with XSS load could be appended to it.

Regards,
Vilmos