replace usages of q() with h() where appropriate (#718)

LabKey · Jan 11, 2024 · 0df405a · 0df405a
1 parent c73de30
commit 0df405a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/flow/src/org/labkey/flow/webparts/FlowSummary.jsp b/flow/src/org/labkey/flow/webparts/FlowSummary.jsp
@@ -240,7 +240,7 @@
                             String iconCls = StringUtils.isNotEmpty(sample.getComment()) ? FlagColumnRenderer.flagEnabledCls() : "";
                       %>
                           "<tr>" +
-                          "<td><a<%=comment%> href='<%=h(url)%>'><i class=<%=q(iconCls)%>/></a>" +
+                          "<td><a<%=comment%> href='<%=h(url)%>'><i class='<%=h(iconCls)%>'/></a>" +
                           "<td nowrap><a<%=comment%> href='<%=h(url)%>'><%=h(name)%></a>" +
                           "</tr>" +
                       <%

diff --git a/ms2/src/org/labkey/ms2/search/msTabbedSearch.jsp b/ms2/src/org/labkey/ms2/search/msTabbedSearch.jsp
@@ -30,7 +30,7 @@
     boolean targetedMSModuleActive = getContainer().getActiveModules().contains(ModuleLoader.getInstance().getModule("TargetedMS"));
     String renderId = "tabbed-search-form-" + getRequestScopedUID();
 %>
-<div id=<%=q(renderId)%>></div>
+<div id="<%=h(renderId)%>"></div>
 
 <style type="text/css">