diff --git a/dspace-jspui/src/main/webapp/search/discovery.jsp b/dspace-jspui/src/main/webapp/search/discovery.jsp index b47720f015..6c05e83ec3 100644 --- a/dspace-jspui/src/main/webapp/search/discovery.jsp +++ b/dspace-jspui/src/main/webapp/search/discovery.jsp @@ -34,6 +34,7 @@ --%> <%@page import="org.dspace.core.Utils"%> +<%@page import="com.coverity.security.Escape"%> <%@page import="org.dspace.discovery.configuration.DiscoverySearchFilterFacet"%> <%@page import="org.dspace.app.webui.util.UIUtil"%> <%@page import="java.util.HashMap"%> @@ -215,7 +216,7 @@ <% for (DiscoverySearchFilter searchFilter : availableFilters) { - String fkey = "jsp.search.filter."+searchFilter.getIndexFieldName(); + String fkey = "jsp.search.filter." + Escape.uriParam(searchFilter.getIndexFieldName()); %><% } %> @@ -235,7 +236,7 @@ <% for (String opt : options) { - String fkey = "jsp.search.filter.op."+opt; + String fkey = "jsp.search.filter.op." + Escape.uriParam(opt); %><% } %> @@ -276,7 +277,7 @@ <% for (DiscoverySearchFilter searchFilter : availableFilters) { - String fkey = "jsp.search.filter."+searchFilter.getIndexFieldName(); + String fkey = "jsp.search.filter." + Escape.uriParam(searchFilter.getIndexFieldName()); %><% } %> @@ -285,7 +286,7 @@ <% for (String opt : options) { - String fkey = "jsp.search.filter.op."+opt; + String fkey = "jsp.search.filter.op." + Escape.uriParam(opt); %><% } %> @@ -340,7 +341,7 @@ for (String sortBy : sortOptions) { String selected = (sortBy.equals(sortedBy) ? "selected=\"selected\"" : ""); - String mKey = "search.sort-by." + sortBy; + String mKey = "search.sort-by." + Utils.addEntities(sortBy); %> <% } %>