[3.0.2] Fix: double encoding "&"

mauricelambert · Jan 27, 2023 · da04703 · da04703
1 parent 7282c55
commit da04703
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/WebScripts/static/js/webscripts_script_js_scripts.js b/WebScripts/static/js/webscripts_script_js_scripts.js
@@ -912,8 +912,8 @@ class OutputBuilder {
     /*
     This function escapes HTML special characters.
     */
-    escape = str => str.replace(/</g, '&lt;').replace(/>/g, '&gt;')
-        .replace(/'/g, "&#x27;").replace(/"/g, '&quot;').replace(/&/g, '&amp;');
+    escape = str => str.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
+        .replace(/'/g, "&#x27;").replace(/"/g, '&quot;');
 
     /*
     This function replaces CRLF by universal new line.
@@ -1487,4 +1487,4 @@ class TableSearch {
             }
         }
     }
-}
+}