Console: Add tunnel nicknames to router debug page

Escape tunnel nicknames on LS debug page
2020-12-29 16:29:53 -05:00
parent 0b59f53fe9
commit 2ceb9c429a
2 changed files with 13 additions and 3 deletions
--- a/apps/routerconsole/java/src/net/i2p/router/web/helpers/NetDbRenderer.java
+++ b/apps/routerconsole/java/src/net/i2p/router/web/helpers/NetDbRenderer.java
@@ -519,7 +519,7 @@ class NetDbRenderer {
                buf.append("<b>").append(_t("Destination")).append(":</b> ");
                TunnelPoolSettings in = _context.tunnelManager().getInboundSettings(key);
                if (in != null && in.getDestinationNickname() != null)
-                    buf.append(in.getDestinationNickname());
+                    buf.append(DataHelper.escapeHTML(in.getDestinationNickname()));
                else
                    buf.append(dest.toBase64().substring(0, 6));
                buf.append("</th></tr>\n");