From 4b90e5414ddd453304032b8503785e1d6f00538d Mon Sep 17 00:00:00 2001
From: Mobb autofixer <git@mobb.ai>
Date: Thu, 5 Dec 2024 12:04:21 +0000
Subject: [PATCH] mobb fix commit: a806ad14-f02b-4efa-afff-725e29f19c71

---
 .../resources/system/workplace/editors/dialogs/link.jsp        | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/modules/org.opencms.base/resources/system/workplace/editors/dialogs/link.jsp b/modules/org.opencms.base/resources/system/workplace/editors/dialogs/link.jsp
index 6ba1673fba..ebc01d5f64 100644
--- a/modules/org.opencms.base/resources/system/workplace/editors/dialogs/link.jsp
+++ b/modules/org.opencms.base/resources/system/workplace/editors/dialogs/link.jsp
@@ -1,3 +1,4 @@
+<%@ page import="org.springframework.web.util.HtmlUtils" %>
 <%@ page import="org.opencms.main.*, org.opencms.workplace.*, org.opencms.workplace.explorer.*, org.opencms.util.CmsStringUtil" %><%	
 
 	// initialize the workplace class
@@ -289,7 +290,7 @@ function checkContext(linkUrl, add) {
                     <td class="maxwidth" style="white-space: nowrap;">
                       <select name="linktarget" id="linktarget" size="1" style="width:150px" onchange="setNameTarget(false);">
                         <option value="_self"><%= wp.key(org.opencms.workplace.editors.Messages.GUI_INPUT_LINKTARGETSELF_0)%></option>
-                        <option value="_blank"><%= wp.key(org.opencms.workplace.editors.Messages.GUI_INPUT_LINKTARGETBLANK_0) %></option>
+                        <option value="_blank"><%= HtmlUtils.htmlEscape(HtmlUtils.htmlUnescape(wp.key(org.opencms.workplace.editors.Messages.GUI_INPUT_LINKTARGETBLANK_0))) %></option>
                         <option value="_top"><%= wp.key(org.opencms.workplace.editors.Messages.GUI_INPUT_LINKTARGETTOP_0)%></option>
                         <option value="named"><%= wp.key(org.opencms.workplace.editors.Messages.GUI_INPUT_LINKTARGETNAMED_0)%></option>
                       </select>