Escape template var output.

[gigi.git] / src / org / cacert / gigi / output / template / TranslateCommand.java

diff --git a/src/org/cacert/gigi/output/template/TranslateCommand.java b/src/org/cacert/gigi/output/template/TranslateCommand.java
index 18bf44764a421b88d017151b4aa8afeb1449a249..0dad247335b1b874689c25c94511253f270bf25d 100644 (file)
--- a/src/org/cacert/gigi/output/template/TranslateCommand.java
+++ b/src/org/cacert/gigi/output/template/TranslateCommand.java
@@ -5,6 +5,7 @@ import java.util.Map;
 
 import org.cacert.gigi.Language;
 import org.cacert.gigi.output.Outputable;
+import org.cacert.gigi.util.HTMLEncoder;
 
 public final class TranslateCommand implements Outputable {
 
@@ -16,6 +17,6 @@ public final class TranslateCommand implements Outputable {
 
     @Override
     public void output(PrintWriter out, Language l, Map<String, Object> vars) {
-        out.print(l.getTranslation(raw));
+        out.print(HTMLEncoder.encodeHTML(l.getTranslation(raw)));
     }
 }