Fix: Comments should be escaped when creating or modifying targets.

greenbone · May 23, 2024 · 23ff8da · 23ff8da
1 parent 3df34c8
commit 23ff8da
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/gsad_gmp.c b/src/gsad_gmp.c
@@ -5336,7 +5336,8 @@ create_target_gmp (gvm_connection_t *connection, credentials_t *credentials,
   CHECK_VARIABLE_INVALID (allow_simultaneous_ips, "Create Target");
 
   if (comment != NULL)
-    comment_element = g_strdup_printf ("<comment>%s</comment>", comment);
+    comment_element =
+      g_markup_printf_escaped ("<comment>%s</comment>", comment);
   else
     comment_element = g_strdup ("");
 
@@ -6307,7 +6308,8 @@ save_target_gmp (gvm_connection_t *connection, credentials_t *credentials,
     entity_t entity;
 
     if (comment)
-      comment_element = g_strdup_printf ("<comment>%s</comment>", comment);
+      comment_element =
+        g_markup_printf_escaped ("<comment>%s</comment>", comment);
     else
       comment_element = g_strdup ("");