escape the set name and description too

This commit is contained in:
Andy Janata 2017-02-14 20:27:01 -08:00
parent d919c07a89
commit f3f9dbe265
1 changed files with 2 additions and 1 deletions

View File

@ -140,7 +140,8 @@ public class CardcastService {
cacheMissingSet(setId); cacheMissingSet(setId);
return null; return null;
} }
final CardcastDeck deck = new CardcastDeck(name, setId, description); final CardcastDeck deck = new CardcastDeck(StringEscapeUtils.escapeXml11(name), setId,
StringEscapeUtils.escapeXml11(description));
// load up the cards // load up the cards
final JSONArray blacks = (JSONArray) cards.get("calls"); final JSONArray blacks = (JSONArray) cards.get("calls");