From 95c6fdf40129c701e85c7b8e6d3ba6265612265c Mon Sep 17 00:00:00 2001
From: Timothy Flynn <trflynn89@pm.me>
Date: Sun, 12 May 2024 14:44:22 -0400
Subject: [PATCH] LibWebView: Escape HTML entities in the Task Manager process
 titles

---
 Userland/Libraries/LibWebView/ProcessManager.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Userland/Libraries/LibWebView/ProcessManager.cpp b/Userland/Libraries/LibWebView/ProcessManager.cpp
index 9a50b28cf97..e915d68941b 100644
--- a/Userland/Libraries/LibWebView/ProcessManager.cpp
+++ b/Userland/Libraries/LibWebView/ProcessManager.cpp
@@ -211,7 +211,7 @@ String ProcessManager::generate_html()
         builder.append("<td>"sv);
         builder.append(WebView::process_name_from_type(process.type));
         if (process.title.has_value())
-            builder.appendff(" - {}", *process.title);
+            builder.appendff(" - {}", escape_html_entities(*process.title));
         builder.append("</td>"sv);
         builder.append("<td>"sv);
         builder.append(MUST(String::number(process.pid)));