diff --git a/dspace-jspui/src/main/webapp/search/discovery.jsp b/dspace-jspui/src/main/webapp/search/discovery.jsp
index b47720f015..6c05e83ec3 100644
--- a/dspace-jspui/src/main/webapp/search/discovery.jsp
+++ b/dspace-jspui/src/main/webapp/search/discovery.jsp
@@ -34,6 +34,7 @@
--%>
<%@page import="org.dspace.core.Utils"%>
+<%@page import="com.coverity.security.Escape"%>
<%@page import="org.dspace.discovery.configuration.DiscoverySearchFilterFacet"%>
<%@page import="org.dspace.app.webui.util.UIUtil"%>
<%@page import="java.util.HashMap"%>
@@ -215,7 +216,7 @@
<%
for (DiscoverySearchFilter searchFilter : availableFilters)
{
- String fkey = "jsp.search.filter."+searchFilter.getIndexFieldName();
+ String fkey = "jsp.search.filter." + Escape.uriParam(searchFilter.getIndexFieldName());
%><%
}
%>
@@ -235,7 +236,7 @@
<%
for (String opt : options)
{
- String fkey = "jsp.search.filter.op."+opt;
+ String fkey = "jsp.search.filter.op." + Escape.uriParam(opt);
%><%
}
%>
@@ -276,7 +277,7 @@
<%
for (DiscoverySearchFilter searchFilter : availableFilters)
{
- String fkey = "jsp.search.filter."+searchFilter.getIndexFieldName();
+ String fkey = "jsp.search.filter." + Escape.uriParam(searchFilter.getIndexFieldName());
%><%
}
%>
@@ -285,7 +286,7 @@
<%
for (String opt : options)
{
- String fkey = "jsp.search.filter.op."+opt;
+ String fkey = "jsp.search.filter.op." + Escape.uriParam(opt);
%><%
}
%>
@@ -340,7 +341,7 @@
for (String sortBy : sortOptions)
{
String selected = (sortBy.equals(sortedBy) ? "selected=\"selected\"" : "");
- String mKey = "search.sort-by." + sortBy;
+ String mKey = "search.sort-by." + Utils.addEntities(sortBy);
%> <%
}
%>