HTML escape the decal file name just in case it contains & or other

illegal characters.
This commit is contained in:
kruland2607 2014-10-30 19:21:59 -05:00
parent e5bba400c1
commit 09cb51d77a

View File

@ -54,7 +54,7 @@ public class RocketComponentSaver {
String name = decal.getImage().getName();
double rotation = decal.getRotation();
EdgeMode edgeMode = decal.getEdgeMode();
elements.add("<decal name=\"" + name + "\" rotation=\"" + rotation + "\" edgemode=\"" + edgeMode.name() + "\">");
elements.add("<decal name=\"" + TextUtil.escapeXML(name) + "\" rotation=\"" + rotation + "\" edgemode=\"" + edgeMode.name() + "\">");
Coordinate center = decal.getCenter();
elements.add("<center x=\"" + center.x + "\" y=\"" + center.y + "\"/>");
Coordinate offset = decal.getOffset();