From 09cb51d77a50e20efa9aac8b0def6bf502c14e28 Mon Sep 17 00:00:00 2001
From: kruland2607 <kruland2607@users.noreply.github.com>
Date: Thu, 30 Oct 2014 19:21:59 -0500
Subject: [PATCH] HTML escape the decal file name just in case it contains & or
 other illegal characters.

---
 .../openrocket/file/openrocket/savers/RocketComponentSaver.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/src/net/sf/openrocket/file/openrocket/savers/RocketComponentSaver.java b/core/src/net/sf/openrocket/file/openrocket/savers/RocketComponentSaver.java
index 7df686e5a..3efe9f228 100644
--- a/core/src/net/sf/openrocket/file/openrocket/savers/RocketComponentSaver.java
+++ b/core/src/net/sf/openrocket/file/openrocket/savers/RocketComponentSaver.java
@@ -54,7 +54,7 @@ public class RocketComponentSaver {
 				String name = decal.getImage().getName();
 				double rotation = decal.getRotation();
 				EdgeMode edgeMode = decal.getEdgeMode();
-				elements.add("<decal name=\"" + name + "\" rotation=\"" + rotation + "\" edgemode=\"" + edgeMode.name() + "\">");
+				elements.add("<decal name=\"" + TextUtil.escapeXML(name) + "\" rotation=\"" + rotation + "\" edgemode=\"" + edgeMode.name() + "\">");
 				Coordinate center = decal.getCenter();
 				elements.add("<center x=\"" + center.x + "\" y=\"" + center.y + "\"/>");
 				Coordinate offset = decal.getOffset();