HtmlEncode the path
authorGonzalo Paniagua Javier <gonzalo.mono@gmail.com>
Fri, 6 Jul 2012 17:42:43 +0000 (13:42 -0400)
committerGonzalo Paniagua Javier <gonzalo.mono@gmail.com>
Fri, 6 Jul 2012 17:42:43 +0000 (13:42 -0400)
Fixes Novell bug #769799.

mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs

index af5ddf45a7a1a3c2d7a867a5aa9ef879491059fe..7e87d487a607a0b942f32830e5ab7011425700f3 100644 (file)
@@ -42,7 +42,7 @@ namespace System.Web
                                
                        throw new HttpException (403,
                                                 "This type of page is not served.",
-                                                req != null ? req.Path : null,
+                                                req != null ? HttpUtility.HtmlEncode (req.Path) : null,
                                                 description);
                }