@@ -2268,7 +2268,7 @@ public void doDataProviderForm1(int language, HttpServletRequest request,
2268
2268
//convert the info into pseudo datasets.xml
2269
2269
String content =
2270
2270
"Data Provider Form - Part 1\n" + //important! Bob's erd.data gmail filter looks for 'Data Provider Form'
2271
- " from " + fromInfo + "\n" +
2271
+ " from " + XML.encodeAsHTML( fromInfo) + "\n" +
2272
2272
" ipAddress=" + ipAddress + "\n" +
2273
2273
"\n" +
2274
2274
"griddedOption=" + griddedOptions[griddedOption] + "\n" +
@@ -2318,7 +2318,7 @@ public void doDataProviderForm1(int language, HttpServletRequest request,
2318
2318
2319
2319
//hidden fields
2320
2320
writer.write(
2321
- widgets.hidden("timestamp", XML.encodeAsHTML( tTimestamp) ) +
2321
+ widgets.hidden("timestamp", tTimestamp) +
2322
2322
"\n");
2323
2323
2324
2324
//begin text
@@ -2344,7 +2344,7 @@ public void doDataProviderForm1(int language, HttpServletRequest request,
2344
2344
30, 50, tYourName, ""))
2345
2345
.replace("&widgetEmailAddress;", widgets.textField("emailAddress", "", //tooltip
2346
2346
30, 50, tEmailAddress, ""))
2347
- .replace("&tTimestamp;", tTimestamp);
2347
+ .replace("&tTimestamp;", XML.encodeAsHTML( tTimestamp) );
2348
2348
writer.write(dataProviderContactInfo
2349
2349
/*
2350
2350
"<h2>Your Contact Information</h2>\n" +
@@ -2356,7 +2356,7 @@ public void doDataProviderForm1(int language, HttpServletRequest request,
2356
2356
" <br>What is your email address? " +
2357
2357
widgets.textField("emailAddress", "", //tooltip
2358
2358
30, 50, tEmailAddress, "") +
2359
- " <br>This dataset submission's timestamp is " + tTimestamp + ".\n" +
2359
+ " <br>This dataset submission's timestamp is " + XML.encodeAsHTML( tTimestamp) + ".\n" +
2360
2360
"\n"
2361
2361
*/);
2362
2362
String dataProviderData = EDStatic.dataProviderDataAr[language]
@@ -2594,7 +2594,7 @@ public void doDataProviderForm2(int language, HttpServletRequest request,
2594
2594
tKeywords.sortIgnoreCase();
2595
2595
String content =
2596
2596
"Data Provider Form - Part 2\n" + //important! Bob's erd.data gmail filter looks for this
2597
- " from " + fromInfo + "\n" +
2597
+ " from " + XML.encodeAsHTML( fromInfo) + "\n" +
2598
2598
" ipAddress=" + ipAddress + "\n" +
2599
2599
"\n" +
2600
2600
" <addAttributes>\n" +
@@ -2671,9 +2671,9 @@ public void doDataProviderForm2(int language, HttpServletRequest request,
2671
2671
2672
2672
//hidden fields
2673
2673
writer.write(
2674
- widgets.hidden("yourName", XML.encodeAsHTML( tYourName) ) +
2675
- widgets.hidden("emailAddress", XML.encodeAsHTML( tEmailAddress) ) +
2676
- widgets.hidden("timestamp", XML.encodeAsHTML( tTimestamp) ) +
2674
+ widgets.hidden("yourName", tYourName) +
2675
+ widgets.hidden("emailAddress", tEmailAddress) +
2676
+ widgets.hidden("timestamp", tTimestamp) +
2677
2677
"\n");
2678
2678
2679
2679
//begin text
@@ -3066,7 +3066,7 @@ public void doDataProviderForm3(int language, HttpServletRequest request,
3066
3066
StringBuilder content = new StringBuilder();
3067
3067
content.append(
3068
3068
"Data Provider Form - Part 3\n" + //important! Bob's erd.data gmail filter looks for this
3069
- " from " + fromInfo + "\n" +
3069
+ " from " + XML.encodeAsHTML( fromInfo) + "\n" +
3070
3070
" ipAddress=" + ipAddress + "\n" +
3071
3071
"\n" +
3072
3072
"groupOf10=" + groupOptions[tGroup] + "\n" +
@@ -3138,9 +3138,9 @@ public void doDataProviderForm3(int language, HttpServletRequest request,
3138
3138
3139
3139
//hidden fields
3140
3140
writer.write(
3141
- widgets.hidden("yourName", XML.encodeAsHTML( tYourName) ) +
3142
- widgets.hidden("emailAddress", XML.encodeAsHTML( tEmailAddress) ) +
3143
- widgets.hidden("timestamp", XML.encodeAsHTML( tTimestamp) ) +
3141
+ widgets.hidden("yourName", tYourName) +
3142
+ widgets.hidden("emailAddress", tEmailAddress) +
3143
+ widgets.hidden("timestamp", tTimestamp) +
3144
3144
"\n");
3145
3145
3146
3146
//begin text
@@ -3383,7 +3383,7 @@ public void doDataProviderForm4(int language, HttpServletRequest request,
3383
3383
//convert the info into pseudo datasets.xml
3384
3384
String content =
3385
3385
"Data Provider Form - Part 4\n" + //important! Bob's erd.data gmail filter looks for this
3386
- " from " + fromInfo + "\n" +
3386
+ " from " + XML.encodeAsHTML( fromInfo) + "\n" +
3387
3387
" ipAddress=" + ipAddress + "\n" +
3388
3388
"\n" +
3389
3389
"Other comments:\n" +
@@ -3432,9 +3432,9 @@ public void doDataProviderForm4(int language, HttpServletRequest request,
3432
3432
3433
3433
//hidden fields
3434
3434
writer.write(
3435
- widgets.hidden("yourName", XML.encodeAsHTML( tYourName) ) +
3436
- widgets.hidden("emailAddress", XML.encodeAsHTML( tEmailAddress) ) +
3437
- widgets.hidden("timestamp", XML.encodeAsHTML( tTimestamp) ) +
3435
+ widgets.hidden("yourName", tYourName) +
3436
+ widgets.hidden("emailAddress", tEmailAddress) +
3437
+ widgets.hidden("timestamp", tTimestamp) +
3438
3438
"\n");
3439
3439
3440
3440
//begin text
@@ -3532,10 +3532,10 @@ public void doDataProviderFormDone(int language, HttpServletRequest request,
3532
3532
3533
3533
//begin text
3534
3534
writer.write(EDStatic.dpf_congratulationAr[language]
3535
- .replace("&tTimestamp;", tTimestamp)
3535
+ .replace("&tTimestamp;", XML.encodeAsHTML( tTimestamp) )
3536
3536
.replaceAll("&tErddapUrl;", tErddapUrl)
3537
- .replace("&tYourName;", SSR.minimalPercentEncode (tYourName))
3538
- .replace("&tEmailAddress;", SSR.minimalPercentEncode (tEmailAddress))
3537
+ .replace("&tYourName;", XML.encodeAsHTML (tYourName))
3538
+ .replace("&tEmailAddress;", XML.encodeAsHTML (tEmailAddress))
3539
3539
3540
3540
// "<h2>You're done! Congratulations! Thank you!</h2>\n" +
3541
3541
// "The ERDDAP administrator will email you soon to figure out the best way transfer\n" +
0 commit comments