diff --git a/gui/src/main/java/com/muwire/gui/HTMLSanitizer.java b/gui/src/main/java/com/muwire/gui/HTMLSanitizer.java
index 0932b425..a003c3c6 100644
--- a/gui/src/main/java/com/muwire/gui/HTMLSanitizer.java
+++ b/gui/src/main/java/com/muwire/gui/HTMLSanitizer.java
@@ -1,17 +1,24 @@
package com.muwire.gui;
public class HTMLSanitizer {
- private static final String escapeChars[] = {"&", "\"", "<", ">"}; //, "'"}; // apostrophe not supported
- private static final String escapeCodes[] = {"&", """, "<", ">", "'"};
- private static final String escapedCodes[] = {"&", """, "<", ">"}; //, "'"}; apostrophe not supported
public static String sanitize(String s) {
if (s == null)
return null;
- String escaped = s;
- for (int i = 0; i < escapeChars.length; i++) {
- escaped = escaped.replace(escapeChars[i], escapedCodes[i]);
+ StringBuilder sb = new StringBuilder(s.length() * 2 + 26);
+ sb.append("");
+ for (int i = 0; i < s.length(); i++) {
+ char c = s.charAt(i);
+ switch(c) {
+ case '&': sb.append("&"); break;
+ case '\"': sb.append("""); break;
+ case '<' : sb.append("<"); break;
+ case '>' : sb.append(">"); break;
+ default :
+ sb.append(c);
+ }
}
- return "" + escaped + "";
+ sb.append("");
+ return sb.toString();
}
}