HTML Escape certificate content (open-eid#1267)

IB-8093 Signed-off-by: Raul Metsma <[email protected]>
metsma · Jul 3, 2024 · 36ab447 · 36ab447
1 parent 7b1997e
commit 36ab447
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/client/widgets/CardWidget.cpp b/client/widgets/CardWidget.cpp
@@ -91,9 +91,9 @@ void CardWidget::update(const TokenData &token, bool multiple)
 	SslCertificate c = t.cert();
 	QString id = c.personalCode();
 	if(!c.subjectInfo("GN").isEmpty() || !c.subjectInfo("SN").isEmpty())
-		ui->cardName->setText(c.toString(QStringLiteral("GN SN")));
+		ui->cardName->setText(c.toString(QStringLiteral("GN SN")).toHtmlEscaped());
 	else
-		ui->cardName->setText(c.toString(QStringLiteral("CN")));
+		ui->cardName->setText(c.toString(QStringLiteral("CN")).toHtmlEscaped());
 	ui->cardName->setAccessibleName(ui->cardName->text().toLower());
 	ui->cardCode->setText(id + "   |");
 	ui->cardCode->setAccessibleName(id);