From 34120cdba856cb6a3a24d48bfcdbdf817e44e8fc Mon Sep 17 00:00:00 2001
From: Mobb autofixer <git@mobb.ai>
Date: Thu, 5 Dec 2024 12:03:51 +0000
Subject: [PATCH] mobb fix commit: e5f1db56-96d3-4dc4-b750-473085d74ecd

---
 .../resources/system/workplace/commons/property_custom.jsp     | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/modules/org.opencms.legacy.tools/resources/system/workplace/commons/property_custom.jsp b/modules/org.opencms.legacy.tools/resources/system/workplace/commons/property_custom.jsp
index 42ded500b8..fa4de02c69 100644
--- a/modules/org.opencms.legacy.tools/resources/system/workplace/commons/property_custom.jsp
+++ b/modules/org.opencms.legacy.tools/resources/system/workplace/commons/property_custom.jsp
@@ -1,3 +1,4 @@
+<%@ page import="org.springframework.web.util.HtmlUtils" %>
 <%@ page import="org.opencms.workplace.commons.*" %><%	
 
 	// initialize the workplace class
@@ -220,7 +221,7 @@ function doSet() {
 
 <%= wp.dialogContentEnd() %>
 
-<%= wp.dialogButtonsOkCancelAdvanced(null, null, "value=\""+wp.key(Messages.GUI_PROPERTY_ADVANCED_0)+"\" onclick=\"submitAdvanced();\"") %>
+<%= HtmlUtils.htmlEscape(HtmlUtils.htmlUnescape(wp.dialogButtonsOkCancelAdvanced(null, null, "value=\""+wp.key(Messages.GUI_PROPERTY_ADVANCED_0)+"\" onclick=\"submitAdvanced();\""))) %>
 </form>
 
 <%= wp.dialogEnd() %>