Index: openacs-4/packages/xowiki/tcl/test/xowiki-test-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/tcl/test/xowiki-test-procs.tcl,v diff -u -r1.1.2.83 -r1.1.2.84 --- openacs-4/packages/xowiki/tcl/test/xowiki-test-procs.tcl 6 Feb 2024 09:32:23 -0000 1.1.2.83 +++ openacs-4/packages/xowiki/tcl/test/xowiki-test-procs.tcl 6 Feb 2024 10:00:11 -0000 1.1.2.84 @@ -1442,15 +1442,15 @@ # submission. # set new_title [$root getElementById F.$f_id._title] - aa_equals "_title stays '$title'" $title [$new_title getAttribute value] + aa_equals "_title stays '[ns_quotehtml $title]'" $title [$new_title getAttribute value] # # On a standard installation, the page title is set to # the (potentially unvalidated) FormPage title. Here # we make sure that our injection attempt has not been # rendered "raw" to the client. # - aa_false "Unvalidated title '$title' was NOT used unquoted in the response" \ + aa_false "Unvalidated title '[ns_quotehtml $title]' was NOT used unquoted in the response" \ [string match *$title* $response] set new_number [$root getElementById F.$f_id.number]