Escape template var output.

[gigi.git] / src / org / cacert / gigi / output / template / TranslateCommand.java

diff --git a/src/org/cacert/gigi/output/template/TranslateCommand.java b/src/org/cacert/gigi/output/template/TranslateCommand.java
index 377c841bcd04615f1415a263acfdc280840fe81c..0dad247335b1b874689c25c94511253f270bf25d 100644 (file)
--- a/src/org/cacert/gigi/output/template/TranslateCommand.java
+++ b/src/org/cacert/gigi/output/template/TranslateCommand.java
@@ -5,16 +5,18 @@ import java.util.Map;
 
 import org.cacert.gigi.Language;
 import org.cacert.gigi.output.Outputable;
+import org.cacert.gigi.util.HTMLEncoder;
 
 public final class TranslateCommand implements Outputable {
-       private final String raw;
 
-       public TranslateCommand(String raw) {
-               this.raw = raw;
-       }
+    private final String raw;
 
-       @Override
-       public void output(PrintWriter out, Language l, Map<String, Object> vars) {
-               out.print(l.getTranslation(raw));
-       }
-}
\ No newline at end of file
+    public TranslateCommand(String raw) {
+        this.raw = raw;
+    }
+
+    @Override
+    public void output(PrintWriter out, Language l, Map<String, Object> vars) {
+        out.print(HTMLEncoder.encodeHTML(l.getTranslation(raw)));
+    }
+}