commit 8f46d53bcbf60db3ad2a21b176b044c493de02a6
author Devin Duffy-Halseth <devin.duffyhalseth@aexp.com> Mon Aug 20 10:44:02 2018 -0700
committer Robert Munteanu <rombert@apache.org> Fri Sep 07 10:38:37 2018 +0200
tree d72fcdb5e5fac88944c9eb3a5dc9deb49700f993
parent 0bcb88412b18b53cba906421a450a9ad75958e88

SLING-7884 - Sanitize output of appender names

Closes #1

src/main/java/org/apache/sling/commons/log/logback/internal/SlingLogPanel.java

diff --git a/src/main/java/org/apache/sling/commons/log/logback/internal/SlingLogPanel.java b/src/main/java/org/apache/sling/commons/log/logback/internal/SlingLogPanel.java
index df83601..ac0004b 100644
--- a/src/main/java/org/apache/sling/commons/log/logback/internal/SlingLogPanel.java
+++ b/src/main/java/org/apache/sling/commons/log/logback/internal/SlingLogPanel.java
@@ -572,7 +572,7 @@
                 return;
             }
         }
-        pw.printf("No appender with name [%s] found", appenderName);
+        pw.printf("No appender with name [%s] found", XmlUtil.escapeXml(appenderName));
     }
 
     private String getLinkedName(FileAppender<ILoggingEvent> appender) throws UnsupportedEncodingException {