Skip to main content
aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorStuart McCulloch2012-04-12 12:27:40 -0400
committerStuart McCulloch2012-04-12 12:27:40 -0400
commit92e19d5fb98f8dcb6904a90adfab5cbf52a8a8e2 (patch)
tree3fe12725d61871eb1dedd28282d58a244453f230
parentbc88a2a7eef9648606a04f122f5b64c2236bd557 (diff)
downloadorg.eclipse.hudson.core-92e19d5fb98f8dcb6904a90adfab5cbf52a8a8e2.tar.gz
org.eclipse.hudson.core-92e19d5fb98f8dcb6904a90adfab5cbf52a8a8e2.tar.xz
org.eclipse.hudson.core-92e19d5fb98f8dcb6904a90adfab5cbf52a8a8e2.zip
Enable escaping by default in core jelly files
-rw-r--r--hudson-core/src/main/java/hudson/Functions.java9
-rw-r--r--hudson-core/src/main/resources/hudson/PluginManager/advanced.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/PluginManager/available.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/PluginManager/checkUpdates.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/PluginManager/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/PluginManager/installed.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/PluginManager/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/PluginManager/sites.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/PluginManager/tabBar.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/PluginManager/table.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/SystemQuietingDownGlobalMessage/detail.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/TcpSlaveAgentListener/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/atom.jelly5
-rw-r--r--hudson-core/src/main/resources/hudson/diagnosis/HudsonHomeDiskUsageMonitor/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/diagnosis/HudsonHomeDiskUsageMonitor/message.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/diagnosis/MemoryUsageMonitor/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/diagnosis/OldDataMonitor/manage.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/diagnosis/OldDataMonitor/message.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/diagnosis/ReverseProxySetupMonitor/message.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/diagnosis/TooManyJobsButNoView/message.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/lifecycle/WindowsInstallerLink/_restart.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/lifecycle/WindowsInstallerLink/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/logging/LogRecorder/configure.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/logging/LogRecorder/delete.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/logging/LogRecorder/deleteConfirmationPanel.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/logging/LogRecorder/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/logging/LogRecorder/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/logging/LogRecorderManager/all.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/logging/LogRecorderManager/feeds.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/logging/LogRecorderManager/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/logging/LogRecorderManager/levels.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/logging/LogRecorderManager/new.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/logging/LogRecorderManager/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/markup/RawHtmlMarkupFormatter/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractBuild/changes.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractBuild/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractBuild/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractBuild/tasks.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractItem/configure-common.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractItem/delete.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractModelObject/descriptionForm.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractModelObject/editDescription.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractModelObject/error.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractProject/BecauseOfUpstreamBuildInProgress/summary.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractProject/_api.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractProject/changes.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractProject/delete.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractProject/deleteConfirmationPanel.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractProject/main.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractProject/noWorkspace.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractProject/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractProject/svn-password.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractProject/wipeOutWorkspace.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AbstractProject/wipeOutWorkspaceBlocked.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Actionable/actions.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AgentSlave/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AllView/newViewDetail.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/AllView/noJob.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Api/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/BooleanParameterDefinition/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/BooleanParameterDefinition/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/BooleanParameterValue/value.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/BuildAuthorizationToken/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/BuildTimelineWidget/control.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Cause/UpstreamCause/description.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/Cause/UserCause/description.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Cause/description.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/CauseAction/summary.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ChoiceParameterDefinition/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ChoiceParameterDefinition/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/_api.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/_script.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/_scriptText.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/ajaxExecutors.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/builds.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/configure.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/custom-jnlp.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/delete.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/deleteConfirmationPanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/load-statistics.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/markOffline.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/nodepropertysummaries.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Computer/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ComputerSet/_new.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ComputerSet/configure.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ComputerSet/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ComputerSet/new.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ComputerSet/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Descriptor/newInstanceDetail.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/DirectoryBrowserSupport/dir.jelly7
-rw-r--r--hudson-core/src/main/resources/hudson/model/DownloadService/footer.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Executor/causeOfDeath.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ExternalJob/deleteConfirmationPanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ExternalJob/newJobDetail.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ExternalJob/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ExternalRun/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ExternalRun/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/FileParameterDefinition/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/FileParameterDefinition/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/FileParameterValue/value.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Fingerprint/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/FreeStyleProject/configure-advanced.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/FreeStyleProject/newJobDetail.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/_api.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/_cli.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/_restart.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/_safeRestart.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/_script.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/_scriptText.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/accessDenied.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/configureExecutors.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/downgrade.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/fingerprintCheck.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/legend.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/load-statistics.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/login.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/loginError.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/manage.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/newView.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/noPrincipal.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/opensearch.xml.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/projectRelationship-help.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/projectRelationship.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/systemInfo.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/threadDump.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Hudson/whoAmI.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/JDK/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Job/_api.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Job/buildTimeTrend.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Job/configure-entries.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Job/configure.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Job/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Job/jobpropertysummaries.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Job/main.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Job/newInstanceDetail.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Job/permalinks.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Job/rename.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Job/rssHeader.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Label/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Label/load-statistics.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Label/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ListView/newViewDetail.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/LoadStatistics/main.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/MyView/newViewDetail.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/MyView/noJob.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/MyViewsProperty/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/MyViewsProperty/newView.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/NoFingerprintMatch/index.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/ParameterDefinition/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ParametersDefinitionProperty/config.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/ParametersDefinitionProperty/index.jelly5
-rw-r--r--hudson-core/src/main/resources/hudson/model/PasswordParameterDefinition/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/PasswordParameterDefinition/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/PasswordParameterValue/value.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/PermalinkProjectAction/Permalink/link.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Project/configure-entries.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ProxyView/configure-entries.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ProxyView/main.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/ProxyView/newViewDetail.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Run/KeepLogBuildBadge/badge.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Run/_api.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Run/artifacts-index.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/Run/configure.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Run/confirmDelete.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Run/console.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Run/consoleFull.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Run/delete.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/Run/logKeep.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/RunParameterDefinition/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/RunParameterDefinition/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/RunParameterValue/value.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/Slave/help-launcher.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/StringParameterDefinition/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/StringParameterDefinition/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/StringParameterValue/value.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/TaskAction/log.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/TreeView/ajaxRows.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/TreeView/main.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/TreeView/newView.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/TreeView/newViewDetail.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/TreeView/sidepanel2.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/UpdateCenter/ConnectionCheckJob/row.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/UpdateCenter/CoreUpdateMonitor/message.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Failure/status.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Installing/status.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Pending/status.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Success/status.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/row.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/UpdateCenter/PageDecoratorImpl/footer.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/UpdateCenter/body.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/UpdateCenter/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/UpdateCenter/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/UsageStatistics/footer.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/User/deleteConfirmationPanel.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/People/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/ajaxBuildQueue.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/ajaxExecutors.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/builds.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/cc.xml.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/configure.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/delete.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/deleteConfirmationPanel.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/main.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/newJob.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/noJob.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/View/sidepanel2.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/labels/LabelAtom/configure.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseLabelIsBusy/summary.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseLabelIsOffline/summary.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseNodeIsBusy/summary.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseNodeIsOffline/summary.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/summary.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/node_monitors/AbstractDiskSpaceMonitor/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/node_monitors/ArchitectureMonitor/column.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/node_monitors/ClockMonitor/column.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/node_monitors/DiskSpaceMonitor/column.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/node_monitors/DiskSpaceMonitorDescriptor/DiskSpace/cause.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/node_monitors/MonitorMarkedNodeOffline/message.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/node_monitors/ResponseTimeMonitor/Data/cause.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/node_monitors/ResponseTimeMonitor/column.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/node_monitors/SwapSpaceMonitor/column.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/node_monitors/TemporarySpaceMonitor/column.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationCompleteNotice/message.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationFailedNotice/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationFailedNotice/message.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/askRootPassword.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/confirm.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/message.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/rss20.jelly5
-rw-r--r--hudson-core/src/main/resources/hudson/scm/AbstractScmTagAction/badge.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/scm/AbstractScmTagAction/inProgress.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/scm/EmptyChangeLogSet/digest.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/scm/EmptyChangeLogSet/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/scm/NullSCM/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/scm/SCM/project-changes.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/search/Search/search-failed.jelly5
-rw-r--r--hudson-core/src/main/resources/hudson/security/AuthorizationMatrixProperty/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/FederatedLoginService/UnclaimedIdentityException/error.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/GlobalMatrixAuthorizationStrategy/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/Details/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/_entryForm.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/addUser.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/delete.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/firstUser.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/loginLink.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/signup.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/signupWithFederatedIdentity.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/success.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/LDAPSecurityRealm/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/PAMSecurityRealm/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/SecurityRealm/loginDialog.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/SecurityRealm/loginLink.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/security/csrf/DefaultCrumbIssuer/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/CommandConnector/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/CommandLauncher/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/CommandLauncher/help.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/ComputerLauncher/main.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/ComputerLauncherFilter/main.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/DelegatingComputerLauncher/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/DumbSlave/configure-entries.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/DumbSlave/newInstanceDetail.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/EnvironmentVariablesNodeProperty/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/help.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/main.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/OfflineCause/ChannelTermination/cause.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/OfflineCause/LaunchFailed/cause.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/OfflineCause/cause.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/Demand/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/Scheduled/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/SimpleScheduledRetentionStrategy/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/SlaveComputer/disconnect.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/SlaveComputer/log.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/SlaveComputer/sidepanel2.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/SlaveComputer/slave-agent.jnlp.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/SlaveComputer/systemInfo.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/slaves/SlaveComputer/threadDump.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/Ant/AntInstallation/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/Ant/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/ArtifactArchiver/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/BatchFile/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/BuildTrigger/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/Fingerprinter/FingerprintAction/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/JavadocArchiver/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/LogRotator/config.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/Mailer/UserProperty/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/Mailer/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/Mailer/global.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/Maven/MavenInstallation/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/Maven/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/Shell/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/Shell/global.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/index.jelly9
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/list.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/summary.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/junit/ClassResult/body.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/junit/ClassResult/list.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/junit/History/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/junit/JUnitResultArchiver/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/test/AbstractTestResultAction/summary.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/test/AggregatedTestResultPublisher/TestResultAction/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/test/AggregatedTestResultPublisher/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/test/MatrixTestResult/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/test/MetaTabulatedResult/body.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/test/MetaTabulatedResult/list.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/test/TestObject/sidepanel.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/test/TestResult/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/test/TestResultProjectAction/floatingBox.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tasks/test/TestResultProjectAction/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tools/CommandInstaller/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tools/DownloadFromUrlInstaller/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tools/InstallSourceProperty/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tools/JDKInstaller/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tools/ToolInstallation/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tools/ToolInstallation/global.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/tools/ToolLocationNodeProperty/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tools/ZipExtractionInstaller/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/tools/label.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/triggers/SCMTrigger/AdministrativeMonitorImpl/message.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/triggers/SCMTrigger/BuildAction/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/triggers/SCMTrigger/DescriptorImpl/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/triggers/SCMTrigger/SCMAction/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/triggers/SCMTrigger/SCMTriggerCause/description.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/triggers/SCMTrigger/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/triggers/SCMTrigger/global.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/triggers/TimerTrigger/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/AWTProblem/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/AdministrativeError/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/AdministrativeError/message.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/util/DoubleLaunchChecker/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/HudsonFailedToLoad/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/HudsonIsLoading/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/HudsonIsRestarting/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/IncompatibleAntVersionDetected/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/IncompatibleServletVersionDetected/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/IncompatibleVMDetected/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/InsufficientPermissionDetected/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/JNADoublyLoaded/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/NoHomeDir/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/util/NoTempDir/index.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/BuildButtonColumn/column.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/BuildButtonColumn/columnHeader.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/ConsoleColumn/column.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/ConsoleColumn/columnHeader.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/views/DefaultMyViewsTabBar/myViewTabs.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/DefaultViewsTabBar/viewTabs.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/JobColumn/column.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/JobColumn/columnHeader.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/LastDurationColumn/column.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/LastDurationColumn/columnHeader.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/LastFailureColumn/column.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/LastFailureColumn/columnHeader.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/LastStableColumn/column.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/LastStableColumn/columnHeader.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/LastSuccessColumn/column.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/LastSuccessColumn/columnHeader.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/ListViewColumn/columnHeader.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/ListViewColumn/config.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/StatusColumn/column.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/StatusColumn/columnHeader.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/views/WeatherColumn/column.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/views/WeatherColumn/columnHeader.jelly3
-rw-r--r--hudson-core/src/main/resources/hudson/widgets/BuildHistoryWidget/entries.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/widgets/HistoryWidget/ajaxBuildHistory.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/widgets/HistoryWidget/all.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/widgets/HistoryWidget/entries.jelly1
-rw-r--r--hudson-core/src/main/resources/hudson/widgets/HistoryWidget/entry.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/foo.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/advanced.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/block.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/checkbox.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/combobox.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/description.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/descriptorList.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/descriptorRadioList.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/dropdownDescriptorSelector.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/dropdownList.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/form/dropdownListBlock.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/editableComboBox.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/editableComboBoxValue.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/entry.jelly7
-rw-r--r--hudson-core/src/main/resources/lib/form/enum.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/enumSet.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/expandableTextbox.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/form.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/helpArea.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/hetero-list.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/hetero-radio.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/invisibleEntry.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/nested.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/option.jelly4
-rw-r--r--hudson-core/src/main/resources/lib/form/optionalBlock.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/optionalProperty.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/password.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/prepareDatabinding.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/property.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/radio.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/radioBlock.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/form/readOnlyTextbox.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/repeatable.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/repeatableDeleteButton.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/repeatableProperty.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/richtextarea.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/rowSet.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/section.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/select.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/slave-mode.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/submit.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/textarea.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/textbox.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/form/validateButton.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/actions.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/artifactList.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/hudson/ballColorTd.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/buildCaption.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/buildHealth.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/buildLink.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/buildListTable.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/buildProgressBar.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/buildRangeLink.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/buildStatusSummary.jelly5
-rw-r--r--hudson-core/src/main/resources/lib/hudson/cascadingDescriptorList.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/editTypeIcon.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/editableDescription.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/help.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/iconSize.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/jobLink.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/listScmBrowsers.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/newFromList/form.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/node.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/progressBar.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/progressiveText.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/build-permalink.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-blockWhenDownstreamBuilding.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-blockWhenUpstreamBuilding.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-buildWrappers.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-builders.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-cleanWorkspace.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-customWorkspace.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-disableBuild.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-publishers.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-quietPeriod.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-retryCount.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-scm.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-trigger.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/config-upstream-pseudo-trigger.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/matrix.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/projectActionFloatingBox.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/project/upstream-downstream.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/projectView.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/projectViewNested.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/projectViewRow.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/propertyTable.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/hudson/queue.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/rssBar-with-iconSize.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/rssBar.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/scriptConsole.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/setIconSize.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/summary.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/hudson/test-result.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/ajax.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/expandButton.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/hasPermission.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/header.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/isAdmin.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/isAdminOrTest.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/jobDeleteForm.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/layout/main-panel.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/pane.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/layout/rightspace.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/searchPopup.jelly3
-rw-r--r--hudson-core/src/main/resources/lib/layout/side-panel.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/tab.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/tabBar.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/task.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/taskWithDialog.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/tasks.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/layout/yui.jelly1
-rw-r--r--hudson-core/src/main/resources/lib/test/bar.jelly1
487 files changed, 560 insertions, 66 deletions
diff --git a/hudson-core/src/main/java/hudson/Functions.java b/hudson-core/src/main/java/hudson/Functions.java
index a64ca37a..fe8e69f5 100644
--- a/hudson-core/src/main/java/hudson/Functions.java
+++ b/hudson-core/src/main/java/hudson/Functions.java
@@ -80,6 +80,7 @@ import org.kohsuke.stapler.Stapler;
import org.kohsuke.stapler.StaplerProxy;
import org.kohsuke.stapler.StaplerRequest;
import org.kohsuke.stapler.StaplerResponse;
+import org.kohsuke.stapler.jelly.InternationalizedStringExpression;
import javax.servlet.ServletException;
import javax.servlet.http.Cookie;
@@ -537,6 +538,10 @@ public class Functions {
return Util.xmlEscape(s);
}
+ public static String xmlUnescape(String s) {
+ return s.replace("&lt;","<").replace("&gt;",">").replace("&amp;","&");
+ }
+
public static void checkPermission(Permission permission) throws IOException, ServletException {
checkPermission(Hudson.getInstance(),permission);
}
@@ -1385,4 +1390,8 @@ public class Functions {
public static boolean isWipeOutPermissionEnabled() {
return Boolean.getBoolean("hudson.security.WipeOutPermission");
}
+
+ public static Object rawHtml(Object o) {
+ return InternationalizedStringExpression.rawHtml(o);
+ }
}
diff --git a/hudson-core/src/main/resources/hudson/PluginManager/advanced.jelly b/hudson-core/src/main/resources/hudson/PluginManager/advanced.jelly
index f386dbc6..cad7f1b6 100644
--- a/hudson-core/src/main/resources/hudson/PluginManager/advanced.jelly
+++ b/hudson-core/src/main/resources/hudson/PluginManager/advanced.jelly
@@ -18,6 +18,7 @@
<!--
List of available new plugins
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="Update Center" permission="${app.ADMINISTER}" norefresh="true">
<st:include page="sidepanel.jelly"/>
diff --git a/hudson-core/src/main/resources/hudson/PluginManager/available.jelly b/hudson-core/src/main/resources/hudson/PluginManager/available.jelly
index 7bcb7d57..8548e42c 100644
--- a/hudson-core/src/main/resources/hudson/PluginManager/available.jelly
+++ b/hudson-core/src/main/resources/hudson/PluginManager/available.jelly
@@ -18,6 +18,7 @@
<!--
List of available new plugins
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<local:table page="available" list="${app.updateCenter.categorizedAvailables}" xmlns:local="/hudson/PluginManager" />
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/PluginManager/checkUpdates.jelly b/hudson-core/src/main/resources/hudson/PluginManager/checkUpdates.jelly
index 2d12c2b8..6135281f 100644
--- a/hudson-core/src/main/resources/hudson/PluginManager/checkUpdates.jelly
+++ b/hudson-core/src/main/resources/hudson/PluginManager/checkUpdates.jelly
@@ -18,6 +18,7 @@
<!--
Forcibly check updates
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="Update Center" permission="${app.ADMINISTER}" forcedUpdateCheck="true" norefresh="true">
<st:include page="sidepanel.jelly"/>
diff --git a/hudson-core/src/main/resources/hudson/PluginManager/index.jelly b/hudson-core/src/main/resources/hudson/PluginManager/index.jelly
index f5ed5c56..ea167117 100644
--- a/hudson-core/src/main/resources/hudson/PluginManager/index.jelly
+++ b/hudson-core/src/main/resources/hudson/PluginManager/index.jelly
@@ -18,6 +18,7 @@
<!--
Update Center main page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<local:table page="updates" list="${app.updateCenter.updates}" xmlns:local="/hudson/PluginManager">
<div style="margin-top:1em">
diff --git a/hudson-core/src/main/resources/hudson/PluginManager/installed.jelly b/hudson-core/src/main/resources/hudson/PluginManager/installed.jelly
index acd4405b..5e6f513b 100644
--- a/hudson-core/src/main/resources/hudson/PluginManager/installed.jelly
+++ b/hudson-core/src/main/resources/hudson/PluginManager/installed.jelly
@@ -18,6 +18,7 @@
<!--
Config page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:layout title="Update Center" permission="${app.ADMINISTER}" norefresh="true">
<st:include page="sidepanel.jelly"/>
diff --git a/hudson-core/src/main/resources/hudson/PluginManager/sidepanel.jelly b/hudson-core/src/main/resources/hudson/PluginManager/sidepanel.jelly
index d0c809ee..c848a583 100644
--- a/hudson-core/src/main/resources/hudson/PluginManager/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/PluginManager/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:header />
<l:side-panel>
diff --git a/hudson-core/src/main/resources/hudson/PluginManager/sites.jelly b/hudson-core/src/main/resources/hudson/PluginManager/sites.jelly
index d5aadbcb..0f256c3c 100644
--- a/hudson-core/src/main/resources/hudson/PluginManager/sites.jelly
+++ b/hudson-core/src/main/resources/hudson/PluginManager/sites.jelly
@@ -18,6 +18,7 @@
<!--
Add/remove update center sites
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="Update Center" permission="${app.ADMINISTER}" norefresh="true">
<st:include page="sidepanel.jelly"/>
diff --git a/hudson-core/src/main/resources/hudson/PluginManager/tabBar.jelly b/hudson-core/src/main/resources/hudson/PluginManager/tabBar.jelly
index cd95e3b4..df355cf6 100644
--- a/hudson-core/src/main/resources/hudson/PluginManager/tabBar.jelly
+++ b/hudson-core/src/main/resources/hudson/PluginManager/tabBar.jelly
@@ -18,6 +18,7 @@
<!--
List of available new plugins
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:tabBar>
<l:tab name="${%Updates}" active="${page=='updates'}" href="." />
diff --git a/hudson-core/src/main/resources/hudson/PluginManager/table.jelly b/hudson-core/src/main/resources/hudson/PluginManager/table.jelly
index 5263be8a..a6aba279 100644
--- a/hudson-core/src/main/resources/hudson/PluginManager/table.jelly
+++ b/hudson-core/src/main/resources/hudson/PluginManager/table.jelly
@@ -22,6 +22,7 @@
list: variable to contain List<Plugin>
page: page name to be passed to local:tabBar
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="Update Center" permission="${app.ADMINISTER}" norefresh="true">
<st:include page="sidepanel.jelly"/>
@@ -91,7 +92,7 @@
<a href="${p.wiki}"><st:out value="${p.displayName}"/></a>
</div>
<j:if test="${p.excerpt!=null}">
- <div class="excerpt">${p.excerpt}</div>
+ <div class="excerpt"><j:out value="${p.excerpt}" /></div>
</j:if>
<j:if test="${!p.isCompatibleWithInstalledVersion()}">
<div class="compatWarning">${%compatWarning}</div>
diff --git a/hudson-core/src/main/resources/hudson/SystemQuietingDownGlobalMessage/detail.jelly b/hudson-core/src/main/resources/hudson/SystemQuietingDownGlobalMessage/detail.jelly
index d58bf6fa..1b202d2b 100644
--- a/hudson-core/src/main/resources/hudson/SystemQuietingDownGlobalMessage/detail.jelly
+++ b/hudson-core/src/main/resources/hudson/SystemQuietingDownGlobalMessage/detail.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<div id='shutdown-msg'>Hudson is preparing to shutdown</div>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/TcpSlaveAgentListener/index.jelly b/hudson-core/src/main/resources/hudson/TcpSlaveAgentListener/index.jelly
index d32fd341..ab6227d2 100644
--- a/hudson-core/src/main/resources/hudson/TcpSlaveAgentListener/index.jelly
+++ b/hudson-core/src/main/resources/hudson/TcpSlaveAgentListener/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<!--
Publicize the TCP port number for JNLP slave agents so that they know where to conenct.
diff --git a/hudson-core/src/main/resources/hudson/atom.jelly b/hudson-core/src/main/resources/hudson/atom.jelly
index baec4e20..9583c921 100644
--- a/hudson-core/src/main/resources/hudson/atom.jelly
+++ b/hudson-core/src/main/resources/hudson/atom.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson"><!-- No whitespace before xml header: -->&lt;?xml version="1.0" encoding="UTF-8"?&gt;
<st:contentType value="application/atom+xml;charset=UTF-8" />
<j:new var="h" className="hudson.Functions" /><!-- instead of JSP functions -->
@@ -39,14 +40,14 @@
<j:forEach var="e" items="${entries}" >
<entry>
- <title>${h.xmlEscape(adapter.getEntryTitle(e))}</title>
+ <title>${adapter.getEntryTitle(e)}</title>
<link rel="alternate" type="text/html" href="${rootURL}${h.encode(adapter.getEntryUrl(e))}"/>
<id>${adapter.getEntryID(e)}</id>
<published>${h.xsDate(adapter.getEntryTimestamp(e))}</published>
<updated>${h.xsDate(adapter.getEntryTimestamp(e))}</updated>
<j:set var="desc" value="${adapter.getEntryDescription(e)}"/>
<j:if test="${desc!=null}">
- <content>${h.xmlEscape(desc)}</content>
+ <content>${desc}</content>
</j:if>
</entry>
</j:forEach>
diff --git a/hudson-core/src/main/resources/hudson/diagnosis/HudsonHomeDiskUsageMonitor/index.jelly b/hudson-core/src/main/resources/hudson/diagnosis/HudsonHomeDiskUsageMonitor/index.jelly
index fcfa692a..78733797 100644
--- a/hudson-core/src/main/resources/hudson/diagnosis/HudsonHomeDiskUsageMonitor/index.jelly
+++ b/hudson-core/src/main/resources/hudson/diagnosis/HudsonHomeDiskUsageMonitor/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${%HUDSON_HOME is almost full}">
<l:main-panel>
diff --git a/hudson-core/src/main/resources/hudson/diagnosis/HudsonHomeDiskUsageMonitor/message.jelly b/hudson-core/src/main/resources/hudson/diagnosis/HudsonHomeDiskUsageMonitor/message.jelly
index 67e9c9d2..7a00f880 100644
--- a/hudson-core/src/main/resources/hudson/diagnosis/HudsonHomeDiskUsageMonitor/message.jelly
+++ b/hudson-core/src/main/resources/hudson/diagnosis/HudsonHomeDiskUsageMonitor/message.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div class="warning">
<form method="post" action="${rootURL}/${it.url}/act" name="${it.id}">
diff --git a/hudson-core/src/main/resources/hudson/diagnosis/MemoryUsageMonitor/index.jelly b/hudson-core/src/main/resources/hudson/diagnosis/MemoryUsageMonitor/index.jelly
index a1a29249..ff5ce1ca 100644
--- a/hudson-core/src/main/resources/hudson/diagnosis/MemoryUsageMonitor/index.jelly
+++ b/hudson-core/src/main/resources/hudson/diagnosis/MemoryUsageMonitor/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName} Memory Usage">
<!-- TODO: where in the tree structure should this really belong? -->
diff --git a/hudson-core/src/main/resources/hudson/diagnosis/OldDataMonitor/manage.jelly b/hudson-core/src/main/resources/hudson/diagnosis/OldDataMonitor/manage.jelly
index d2aaed58..cd4db274 100644
--- a/hudson-core/src/main/resources/hudson/diagnosis/OldDataMonitor/manage.jelly
+++ b/hudson-core/src/main/resources/hudson/diagnosis/OldDataMonitor/manage.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="${%Manage Old Data}" permission="${app.ADMINISTER}">
<st:include page="sidepanel.jelly" it="${app}"/>
diff --git a/hudson-core/src/main/resources/hudson/diagnosis/OldDataMonitor/message.jelly b/hudson-core/src/main/resources/hudson/diagnosis/OldDataMonitor/message.jelly
index d8a706c5..dc570218 100644
--- a/hudson-core/src/main/resources/hudson/diagnosis/OldDataMonitor/message.jelly
+++ b/hudson-core/src/main/resources/hudson/diagnosis/OldDataMonitor/message.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div class="warning">
<form method="post" action="${rootURL}/${it.url}/act" name="${it.id}">
diff --git a/hudson-core/src/main/resources/hudson/diagnosis/ReverseProxySetupMonitor/message.jelly b/hudson-core/src/main/resources/hudson/diagnosis/ReverseProxySetupMonitor/message.jelly
index c9bca3b9..eb37e95b 100644
--- a/hudson-core/src/main/resources/hudson/diagnosis/ReverseProxySetupMonitor/message.jelly
+++ b/hudson-core/src/main/resources/hudson/diagnosis/ReverseProxySetupMonitor/message.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<script>
var checkAjax=new Ajax.Request('${rootURL}/${it.url}/test', {
diff --git a/hudson-core/src/main/resources/hudson/diagnosis/TooManyJobsButNoView/message.jelly b/hudson-core/src/main/resources/hudson/diagnosis/TooManyJobsButNoView/message.jelly
index 3fd7bb09..c4c62edc 100644
--- a/hudson-core/src/main/resources/hudson/diagnosis/TooManyJobsButNoView/message.jelly
+++ b/hudson-core/src/main/resources/hudson/diagnosis/TooManyJobsButNoView/message.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div class="warning">
<form method="post" action="${rootURL}/${it.url}/act" name="${it.id}">
diff --git a/hudson-core/src/main/resources/hudson/lifecycle/WindowsInstallerLink/_restart.jelly b/hudson-core/src/main/resources/hudson/lifecycle/WindowsInstallerLink/_restart.jelly
index 39db9023..cf65621c 100644
--- a/hudson-core/src/main/resources/hudson/lifecycle/WindowsInstallerLink/_restart.jelly
+++ b/hudson-core/src/main/resources/hudson/lifecycle/WindowsInstallerLink/_restart.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:statusCode value="503" /><!-- SERVICE NOT AVAILABLE -->
<l:layout permission="${app.ADMINISTER}">
diff --git a/hudson-core/src/main/resources/hudson/lifecycle/WindowsInstallerLink/index.jelly b/hudson-core/src/main/resources/hudson/lifecycle/WindowsInstallerLink/index.jelly
index c968b795..092190e3 100644
--- a/hudson-core/src/main/resources/hudson/lifecycle/WindowsInstallerLink/index.jelly
+++ b/hudson-core/src/main/resources/hudson/lifecycle/WindowsInstallerLink/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout permission="${app.ADMINISTER}" title="${%Install as Windows Service}">
<st:include it="${app}" page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/logging/LogRecorder/configure.jelly b/hudson-core/src/main/resources/hudson/logging/LogRecorder/configure.jelly
index bac812e9..a6375009 100644
--- a/hudson-core/src/main/resources/hudson/logging/LogRecorder/configure.jelly
+++ b/hudson-core/src/main/resources/hudson/logging/LogRecorder/configure.jelly
@@ -18,6 +18,7 @@
<!--
Config page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/logging/LogRecorder/delete.jelly b/hudson-core/src/main/resources/hudson/logging/LogRecorder/delete.jelly
index 0ae5bd1c..520cd3ba 100644
--- a/hudson-core/src/main/resources/hudson/logging/LogRecorder/delete.jelly
+++ b/hudson-core/src/main/resources/hudson/logging/LogRecorder/delete.jelly
@@ -18,6 +18,7 @@
<!--
Displays the button to delete the build.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/logging/LogRecorder/deleteConfirmationPanel.jelly b/hudson-core/src/main/resources/hudson/logging/LogRecorder/deleteConfirmationPanel.jelly
index 87af2b4d..ef3f1bec 100644
--- a/hudson-core/src/main/resources/hudson/logging/LogRecorder/deleteConfirmationPanel.jelly
+++ b/hudson-core/src/main/resources/hudson/logging/LogRecorder/deleteConfirmationPanel.jelly
@@ -14,10 +14,11 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
<form method="post" action="doDelete">
<h4>${%Are you sure about deleting the log recorder?}</h4>
<input type="submit" class="yes" value="${%Yes}" />
<input type="button" class="no" value="${%No}" />
</form>
-</div> \ No newline at end of file
+</div>
diff --git a/hudson-core/src/main/resources/hudson/logging/LogRecorder/index.jelly b/hudson-core/src/main/resources/hudson/logging/LogRecorder/index.jelly
index d513ed05..398b3c5e 100644
--- a/hudson-core/src/main/resources/hudson/logging/LogRecorder/index.jelly
+++ b/hudson-core/src/main/resources/hudson/logging/LogRecorder/index.jelly
@@ -18,6 +18,7 @@
<!--
Log view
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="Log" permission="${app.ADMINISTER}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/logging/LogRecorder/sidepanel.jelly b/hudson-core/src/main/resources/hudson/logging/LogRecorder/sidepanel.jelly
index 664a595e..e7dc455d 100644
--- a/hudson-core/src/main/resources/hudson/logging/LogRecorder/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/logging/LogRecorder/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for the log recorder
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:header />
<l:side-panel>
diff --git a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/all.jelly b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/all.jelly
index a397c6cc..b467410c 100644
--- a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/all.jelly
+++ b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/all.jelly
@@ -18,6 +18,7 @@
<!--
Show all hudson.* logs
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="Log">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/feeds.jelly b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/feeds.jelly
index 30c2bdfa..f1a6259e 100644
--- a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/feeds.jelly
+++ b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/feeds.jelly
@@ -16,6 +16,7 @@
<!-- list of feed links -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div align="right" style="margin:1em">
<img src="${imagesURL}/atom.gif" border="0" alt="Feed"/>
diff --git a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/index.jelly b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/index.jelly
index 746fcbb2..9e164844 100644
--- a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/index.jelly
+++ b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/index.jelly
@@ -18,6 +18,7 @@
<!--
Log view
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="${%Log}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/levels.jelly b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/levels.jelly
index c2ce7a2f..499488d5 100644
--- a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/levels.jelly
+++ b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/levels.jelly
@@ -18,6 +18,7 @@
<!--
Show form to adjust log levels
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="Log Levels">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/new.jelly b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/new.jelly
index cd0dbd99..83d7b5e9 100644
--- a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/new.jelly
+++ b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/new.jelly
@@ -18,6 +18,7 @@
<!--
Create a new LogRecorder
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/sidepanel.jelly b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/sidepanel.jelly
index 44747d19..cda81cfd 100644
--- a/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/logging/LogRecorderManager/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:header />
<l:side-panel>
diff --git a/hudson-core/src/main/resources/hudson/markup/RawHtmlMarkupFormatter/config.jelly b/hudson-core/src/main/resources/hudson/markup/RawHtmlMarkupFormatter/config.jelly
index 735a843f..368d798e 100644
--- a/hudson-core/src/main/resources/hudson/markup/RawHtmlMarkupFormatter/config.jelly
+++ b/hudson-core/src/main/resources/hudson/markup/RawHtmlMarkupFormatter/config.jelly
@@ -13,6 +13,7 @@
#************************************************************************** -->
<!-- no config -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:description>
${%blurb}
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractBuild/changes.jelly b/hudson-core/src/main/resources/hudson/model/AbstractBuild/changes.jelly
index 64dcf332..ae4a1b4a 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractBuild/changes.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractBuild/changes.jelly
@@ -18,6 +18,7 @@
<!--
Displays the console output
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.fullDisplayName} ${%Changes}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractBuild/index.jelly b/hudson-core/src/main/resources/hudson/model/AbstractBuild/index.jelly
index c8746361..30079f9b 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractBuild/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractBuild/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.fullDisplayName}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractBuild/sidepanel.jelly b/hudson-core/src/main/resources/hudson/model/AbstractBuild/sidepanel.jelly
index f651c699..80c17d8f 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractBuild/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractBuild/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for the build view.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:header />
<l:side-panel>
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractBuild/tasks.jelly b/hudson-core/src/main/resources/hudson/model/AbstractBuild/tasks.jelly
index 8aca1203..198cbb4b 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractBuild/tasks.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractBuild/tasks.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for the build view.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:task icon="images/24x24/up.png" href="${it.upUrl}" title="${%Back to Project}" />
<l:task icon="images/24x24/search.png" href="${buildUrl.baseUrl}/" title="${%Status}" />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractItem/configure-common.jelly b/hudson-core/src/main/resources/hudson/model/AbstractItem/configure-common.jelly
index f93fa85c..bc6e7435 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractItem/configure-common.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractItem/configure-common.jelly
@@ -18,6 +18,7 @@
<!--
Parts of the configuration that applies to Project and MavenModuleSet.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:p="/lib/hudson/project" xmlns:this="this">
<p:config-disableBuild/>
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractItem/delete.jelly b/hudson-core/src/main/resources/hudson/model/AbstractItem/delete.jelly
index 4294475c..29d37532 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractItem/delete.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractItem/delete.jelly
@@ -21,6 +21,7 @@
Some jobs cannot be deleted by the user, so this view is not necessarily
applicable to all jobs.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractModelObject/descriptionForm.jelly b/hudson-core/src/main/resources/hudson/model/AbstractModelObject/descriptionForm.jelly
index dc19c524..c60ac70c 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractModelObject/descriptionForm.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractModelObject/descriptionForm.jelly
@@ -18,6 +18,7 @@
<!--
Used by editableDescription.jelly for loading the edit form.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:f="/lib/form" xmlns:l="/lib/layout">
<j:if test="${it.class.name=='hudson.model.Hudson'}">
<j:set var="it" value="${it.primaryView}"/>
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractModelObject/editDescription.jelly b/hudson-core/src/main/resources/hudson/model/AbstractModelObject/editDescription.jelly
index 9cf4b89e..5903637d 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractModelObject/editDescription.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractModelObject/editDescription.jelly
@@ -18,6 +18,7 @@
<!--
If JavaScript is off, this form is used to edit the description
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName}" norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractModelObject/error.jelly b/hudson-core/src/main/resources/hudson/model/AbstractModelObject/error.jelly
index 3506a0cd..0de7ccb6 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractModelObject/error.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractModelObject/error.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:statusCode value="400" /><!-- clearly indicate that this page is an error page -->
<l:layout title="Hudson">
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractProject/BecauseOfUpstreamBuildInProgress/summary.jelly b/hudson-core/src/main/resources/hudson/model/AbstractProject/BecauseOfUpstreamBuildInProgress/summary.jelly
index f9937504..594a58f6 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractProject/BecauseOfUpstreamBuildInProgress/summary.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractProject/BecauseOfUpstreamBuildInProgress/summary.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:structuredMessageFormat key="description">
<st:structuredMessageArgument>
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractProject/_api.jelly b/hudson-core/src/main/resources/hudson/model/AbstractProject/_api.jelly
index 5efdbb56..91b42292 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractProject/_api.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractProject/_api.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:include page="/hudson/model/Job/_api.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractProject/changes.jelly b/hudson-core/src/main/resources/hudson/model/AbstractProject/changes.jelly
index 548905e6..d1db49d4 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractProject/changes.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractProject/changes.jelly
@@ -18,6 +18,7 @@
<!--
Displays the console output
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${%changes.title(it.name)}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractProject/delete.jelly b/hudson-core/src/main/resources/hudson/model/AbstractProject/delete.jelly
index 3bf709a0..7444d11d 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractProject/delete.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractProject/delete.jelly
@@ -13,6 +13,7 @@
#
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<st:include page="sidepanel.jelly" />
@@ -35,4 +36,4 @@
</j:choose>
</l:main-panel>
</l:layout>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractProject/deleteConfirmationPanel.jelly b/hudson-core/src/main/resources/hudson/model/AbstractProject/deleteConfirmationPanel.jelly
index 7b79e51d..544218ba 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractProject/deleteConfirmationPanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractProject/deleteConfirmationPanel.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:jobDeleteForm />
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractProject/main.jelly b/hudson-core/src/main/resources/hudson/model/AbstractProject/main.jelly
index 1573febc..91ac23d9 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractProject/main.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractProject/main.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
<p:projectActionFloatingBox />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractProject/noWorkspace.jelly b/hudson-core/src/main/resources/hudson/model/AbstractProject/noWorkspace.jelly
index 72f2e369..c7f0d452 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractProject/noWorkspace.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractProject/noWorkspace.jelly
@@ -16,6 +16,7 @@
<!-- tell user that there's no workspace yet -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractProject/sidepanel.jelly b/hudson-core/src/main/resources/hudson/model/AbstractProject/sidepanel.jelly
index 9ab22129..fc1d8435 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractProject/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractProject/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for the project view.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:header title="${it.name}">
<st:include page="rssHeader.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractProject/svn-password.jelly b/hudson-core/src/main/resources/hudson/model/AbstractProject/svn-password.jelly
index cea3fdc5..e9c3200a 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractProject/svn-password.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractProject/svn-password.jelly
@@ -16,6 +16,7 @@
<!-- show the icon legend -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractProject/wipeOutWorkspace.jelly b/hudson-core/src/main/resources/hudson/model/AbstractProject/wipeOutWorkspace.jelly
index 6b519f4a..fa496551 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractProject/wipeOutWorkspace.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractProject/wipeOutWorkspace.jelly
@@ -16,6 +16,7 @@
<!-- ask the user if he's ready to wipe out the workspace -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/AbstractProject/wipeOutWorkspaceBlocked.jelly b/hudson-core/src/main/resources/hudson/model/AbstractProject/wipeOutWorkspaceBlocked.jelly
index c8e6224a..f1947dde 100644
--- a/hudson-core/src/main/resources/hudson/model/AbstractProject/wipeOutWorkspaceBlocked.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AbstractProject/wipeOutWorkspaceBlocked.jelly
@@ -16,6 +16,7 @@
<!-- tell user that there's no workspace yet -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Actionable/actions.jelly b/hudson-core/src/main/resources/hudson/model/Actionable/actions.jelly
index 29bd699d..f97afebf 100644
--- a/hudson-core/src/main/resources/hudson/model/Actionable/actions.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Actionable/actions.jelly
@@ -18,6 +18,7 @@
<!--
Action list
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<t:actions />
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/AgentSlave/config.jelly b/hudson-core/src/main/resources/hudson/model/AgentSlave/config.jelly
index bf97f0a7..fcbc2edb 100644
--- a/hudson-core/src/main/resources/hudson/model/AgentSlave/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AgentSlave/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%launch command}">
<f:textbox name="slave.command" value="${slave.command}"/>
diff --git a/hudson-core/src/main/resources/hudson/model/AllView/newViewDetail.jelly b/hudson-core/src/main/resources/hudson/model/AllView/newViewDetail.jelly
index b3005692..586a5381 100644
--- a/hudson-core/src/main/resources/hudson/model/AllView/newViewDetail.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AllView/newViewDetail.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
${%blurb}
</div>
diff --git a/hudson-core/src/main/resources/hudson/model/AllView/noJob.jelly b/hudson-core/src/main/resources/hudson/model/AllView/noJob.jelly
index ef2993e2..5a05ac8a 100644
--- a/hudson-core/src/main/resources/hudson/model/AllView/noJob.jelly
+++ b/hudson-core/src/main/resources/hudson/model/AllView/noJob.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
<!--
This is a good place to add "welcome" materials, like pointers to the website and etc
diff --git a/hudson-core/src/main/resources/hudson/model/Api/index.jelly b/hudson-core/src/main/resources/hudson/model/Api/index.jelly
index 9dd54497..d23c11c3 100644
--- a/hudson-core/src/main/resources/hudson/model/Api/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Api/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="Remote API">
<l:main-panel>
diff --git a/hudson-core/src/main/resources/hudson/model/BooleanParameterDefinition/config.jelly b/hudson-core/src/main/resources/hudson/model/BooleanParameterDefinition/config.jelly
index b6a73650..62a4903d 100644
--- a/hudson-core/src/main/resources/hudson/model/BooleanParameterDefinition/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/BooleanParameterDefinition/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/BooleanParameterDefinition/index.jelly b/hudson-core/src/main/resources/hudson/model/BooleanParameterDefinition/index.jelly
index 10dab121..40e434b0 100644
--- a/hudson-core/src/main/resources/hudson/model/BooleanParameterDefinition/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/BooleanParameterDefinition/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/BooleanParameterValue/value.jelly b/hudson-core/src/main/resources/hudson/model/BooleanParameterValue/value.jelly
index 3d3dc514..650b58f0 100644
--- a/hudson-core/src/main/resources/hudson/model/BooleanParameterValue/value.jelly
+++ b/hudson-core/src/main/resources/hudson/model/BooleanParameterValue/value.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/BuildAuthorizationToken/config.jelly b/hudson-core/src/main/resources/hudson/model/BuildAuthorizationToken/config.jelly
index 73126655..2d884068 100644
--- a/hudson-core/src/main/resources/hudson/model/BuildAuthorizationToken/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/BuildAuthorizationToken/config.jelly
@@ -19,6 +19,7 @@
Pseudo trigger configuration.
Note that it is the object that owns BuildAuthorizationToken
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:if test="${app.useSecurity}">
<f:optionalBlock name="pseudoRemoteTrigger"
diff --git a/hudson-core/src/main/resources/hudson/model/BuildTimelineWidget/control.jelly b/hudson-core/src/main/resources/hudson/model/BuildTimelineWidget/control.jelly
index 99bae19c..96d0d845 100644
--- a/hudson-core/src/main/resources/hudson/model/BuildTimelineWidget/control.jelly
+++ b/hudson-core/src/main/resources/hudson/model/BuildTimelineWidget/control.jelly
@@ -13,6 +13,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:documentation>
Show timeline trend image. It takes two builds
diff --git a/hudson-core/src/main/resources/hudson/model/Cause/UpstreamCause/description.jelly b/hudson-core/src/main/resources/hudson/model/Cause/UpstreamCause/description.jelly
index a51a0160..7e117906 100644
--- a/hudson-core/src/main/resources/hudson/model/Cause/UpstreamCause/description.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Cause/UpstreamCause/description.jelly
@@ -14,7 +14,8 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<!-- upstreamUrl added in 1.284, so handle missing value -->
- <span>${it.upstreamUrl!=null ? "%started_by_project(it.upstreamProject,it.upstreamBuild.toString(),it.upstreamUrl,rootURL)" : it.shortDescription}</span>
+ <span><j:out value='${it.upstreamUrl!=null ? "%started_by_project(it.upstreamProject,it.upstreamBuild.toString(),it.upstreamUrl,rootURL)" : it.shortDescription}' /></span>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/Cause/UserCause/description.jelly b/hudson-core/src/main/resources/hudson/model/Cause/UserCause/description.jelly
index 16316ebc..9a87c1a9 100644
--- a/hudson-core/src/main/resources/hudson/model/Cause/UserCause/description.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Cause/UserCause/description.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<span>${%started_by_user(it.userName,rootURL)}</span>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/Cause/description.jelly b/hudson-core/src/main/resources/hudson/model/Cause/description.jelly
index f3db16c1..8503f7a9 100644
--- a/hudson-core/src/main/resources/hudson/model/Cause/description.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Cause/description.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
- <span>${it.shortDescription}</span>
+ <span><j:out value="${it.shortDescription}" /></span>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/CauseAction/summary.jelly b/hudson-core/src/main/resources/hudson/model/CauseAction/summary.jelly
index 88200bcd..0c22d1b4 100644
--- a/hudson-core/src/main/resources/hudson/model/CauseAction/summary.jelly
+++ b/hudson-core/src/main/resources/hudson/model/CauseAction/summary.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<t:summary icon="orange-square.png">
<j:forEach var="entry" items="${it.causeCounts.entrySet()}">
diff --git a/hudson-core/src/main/resources/hudson/model/ChoiceParameterDefinition/config.jelly b/hudson-core/src/main/resources/hudson/model/ChoiceParameterDefinition/config.jelly
index fe5231be..9770c752 100644
--- a/hudson-core/src/main/resources/hudson/model/ChoiceParameterDefinition/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ChoiceParameterDefinition/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/ChoiceParameterDefinition/index.jelly b/hudson-core/src/main/resources/hudson/model/ChoiceParameterDefinition/index.jelly
index 0a2c5c21..c7cba92a 100644
--- a/hudson-core/src/main/resources/hudson/model/ChoiceParameterDefinition/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ChoiceParameterDefinition/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/_api.jelly b/hudson-core/src/main/resources/hudson/model/Computer/_api.jelly
index f81af09f..933be3e0 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/_api.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/_api.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<h2>Load Statistics</h2>
<p>
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/_script.jelly b/hudson-core/src/main/resources/hudson/model/Computer/_script.jelly
index 3d48ea9a..f05847b5 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/_script.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/_script.jelly
@@ -18,6 +18,7 @@
<!--
Called from doScript() to display the execution result and the form.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:if test="${app.scriptSupport == null}">
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/_scriptText.jelly b/hudson-core/src/main/resources/hudson/model/Computer/_scriptText.jelly
index e6489daa..f95ef8d5 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/_scriptText.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/_scriptText.jelly
@@ -18,5 +18,6 @@
<!--
Called from doScriptText() to display the execution result.
-->
+<?jelly escape-by-default='false'?>
<st:compress xmlns:j="jelly:core" xmlns:st="jelly:stapler">
<st:contentType value="text/plain;charset=UTF-8" />${output}</st:compress>
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/ajaxExecutors.jelly b/hudson-core/src/main/resources/hudson/model/Computer/ajaxExecutors.jelly
index 4bf89f2d..debb134b 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/ajaxExecutors.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/ajaxExecutors.jelly
@@ -18,6 +18,7 @@
<!--
Used to asynchronously update executor queue
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:ajax>
<t:executors computers="${h.singletonList(it)}" />
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/builds.jelly b/hudson-core/src/main/resources/hudson/model/Computer/builds.jelly
index 192d58c0..9733527f 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/builds.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/builds.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/configure.jelly b/hudson-core/src/main/resources/hudson/model/Computer/configure.jelly
index b82a7052..db0b5cdc 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/configure.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/configure.jelly
@@ -18,6 +18,7 @@
<!--
Config page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true" permission="${it.CONFIGURE}" title="${%title(it.displayName)}">
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/custom-jnlp.jelly b/hudson-core/src/main/resources/hudson/model/Computer/custom-jnlp.jelly
index f2a6fb6c..4c004ea5 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/custom-jnlp.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/custom-jnlp.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/delete.jelly b/hudson-core/src/main/resources/hudson/model/Computer/delete.jelly
index b9297997..f1d6e44e 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/delete.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/delete.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/deleteConfirmationPanel.jelly b/hudson-core/src/main/resources/hudson/model/Computer/deleteConfirmationPanel.jelly
index c684a8b2..14e46aa9 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/deleteConfirmationPanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/deleteConfirmationPanel.jelly
@@ -13,6 +13,7 @@
#
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<script type="text/javascript">
function deletingSlave() {
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/index.jelly b/hudson-core/src/main/resources/hudson/model/Computer/index.jelly
index 47ffd656..e8315577 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/load-statistics.jelly b/hudson-core/src/main/resources/hudson/model/Computer/load-statistics.jelly
index 99b7b745..25ea369d 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/load-statistics.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/load-statistics.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName} Load Statistics">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/markOffline.jelly b/hudson-core/src/main/resources/hudson/model/Computer/markOffline.jelly
index 06c606a7..16b489e2 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/markOffline.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/markOffline.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${%title(it.displayName)}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/nodepropertysummaries.jelly b/hudson-core/src/main/resources/hudson/model/Computer/nodepropertysummaries.jelly
index 0191218d..5e71e599 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/nodepropertysummaries.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/nodepropertysummaries.jelly
@@ -16,6 +16,7 @@
<!-- display permalinks of the page -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler">
<!-- give properties a chance to contribute summary item -->
<j:forEach var="p" items="${app.globalNodeProperties}">
diff --git a/hudson-core/src/main/resources/hudson/model/Computer/sidepanel.jelly b/hudson-core/src/main/resources/hudson/model/Computer/sidepanel.jelly
index 5984b08d..d41d3eb7 100644
--- a/hudson-core/src/main/resources/hudson/model/Computer/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Computer/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for a slave.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:header />
<l:side-panel>
diff --git a/hudson-core/src/main/resources/hudson/model/ComputerSet/_new.jelly b/hudson-core/src/main/resources/hudson/model/ComputerSet/_new.jelly
index aaecd2ee..1f2e9722 100644
--- a/hudson-core/src/main/resources/hudson/model/ComputerSet/_new.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ComputerSet/_new.jelly
@@ -18,6 +18,7 @@
<!--
2nd page in the "new slave" page for displaying the entire configuration entries for the selected job type.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true" permission="${app.ADMINISTER}">
diff --git a/hudson-core/src/main/resources/hudson/model/ComputerSet/configure.jelly b/hudson-core/src/main/resources/hudson/model/ComputerSet/configure.jelly
index 7ccb26fd..2f35fb74 100644
--- a/hudson-core/src/main/resources/hudson/model/ComputerSet/configure.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ComputerSet/configure.jelly
@@ -18,6 +18,7 @@
<!--
Manage monitoring
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${%Node Monitoring Configuration}" norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/ComputerSet/index.jelly b/hudson-core/src/main/resources/hudson/model/ComputerSet/index.jelly
index da11c89c..f7031a15 100644
--- a/hudson-core/src/main/resources/hudson/model/ComputerSet/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ComputerSet/index.jelly
@@ -18,6 +18,7 @@
<!--
Entrance to the configuration page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:layout title="Nodes">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/ComputerSet/new.jelly b/hudson-core/src/main/resources/hudson/model/ComputerSet/new.jelly
index 30287c88..02440487 100644
--- a/hudson-core/src/main/resources/hudson/model/ComputerSet/new.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ComputerSet/new.jelly
@@ -22,6 +22,7 @@
new.jelly -> ComputerSet.doCreateItem -> _new2.jelly -> ComputerSet.doDoCreateItem
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:layout norefresh="true" permission="${app.ADMINISTER}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/ComputerSet/sidepanel.jelly b/hudson-core/src/main/resources/hudson/model/ComputerSet/sidepanel.jelly
index 3ac112a7..b8b6e7e3 100644
--- a/hudson-core/src/main/resources/hudson/model/ComputerSet/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ComputerSet/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:header />
<l:side-panel>
diff --git a/hudson-core/src/main/resources/hudson/model/Descriptor/newInstanceDetail.jelly b/hudson-core/src/main/resources/hudson/model/Descriptor/newInstanceDetail.jelly
index dd011368..34173400 100644
--- a/hudson-core/src/main/resources/hudson/model/Descriptor/newInstanceDetail.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Descriptor/newInstanceDetail.jelly
@@ -36,6 +36,7 @@
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<!--
Used to render the description under a radio button in the "new job/computer/etc" page.
diff --git a/hudson-core/src/main/resources/hudson/model/DirectoryBrowserSupport/dir.jelly b/hudson-core/src/main/resources/hudson/model/DirectoryBrowserSupport/dir.jelly
index db494af2..7671d653 100644
--- a/hudson-core/src/main/resources/hudson/model/DirectoryBrowserSupport/dir.jelly
+++ b/hudson-core/src/main/resources/hudson/model/DirectoryBrowserSupport/dir.jelly
@@ -16,6 +16,7 @@
<!-- Show files in the workspace -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.title} : ${path}">
<st:include page="sidepanel.jelly" it="${it.owner}"/>
@@ -26,7 +27,7 @@
<form action="${backPath}" method="get">
<a href="${topPath}"><img src="${imagesURL}/48x48/${icon}" class="rootIcon" alt=""/></a>
<j:forEach var="p" items="${parentPath}">
- <a href="${p.href}">${h.xmlEscape(p.title)}</a>
+ <a href="${p.href}">${p.title}</a>
/
</j:forEach>
<input type="text" name="pattern" value="${pattern}" />
@@ -51,10 +52,10 @@
<j:choose>
<j:when test="${x.readable}">
- <a href="${t.href}">${h.xmlEscape(t.title)}</a>
+ <a href="${t.href}">${t.title}</a>
</j:when>
<j:otherwise>
- ${h.xmlEscape(t.title)}
+ ${t.title}
</j:otherwise>
</j:choose>
diff --git a/hudson-core/src/main/resources/hudson/model/DownloadService/footer.jelly b/hudson-core/src/main/resources/hudson/model/DownloadService/footer.jelly
index c4d944aa..51b40c6f 100644
--- a/hudson-core/src/main/resources/hudson/model/DownloadService/footer.jelly
+++ b/hudson-core/src/main/resources/hudson/model/DownloadService/footer.jelly
@@ -22,6 +22,7 @@
This file is pulled into the layout.jelly
-->
+<?jelly escape-by-default='false'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
${it.generateFragment()}
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/Executor/causeOfDeath.jelly b/hudson-core/src/main/resources/hudson/model/Executor/causeOfDeath.jelly
index 88b46c09..55a338a2 100644
--- a/hudson-core/src/main/resources/hudson/model/Executor/causeOfDeath.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Executor/causeOfDeath.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.name}">
<l:header />
diff --git a/hudson-core/src/main/resources/hudson/model/ExternalJob/deleteConfirmationPanel.jelly b/hudson-core/src/main/resources/hudson/model/ExternalJob/deleteConfirmationPanel.jelly
index 8bf592a1..6fc0a61f 100644
--- a/hudson-core/src/main/resources/hudson/model/ExternalJob/deleteConfirmationPanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ExternalJob/deleteConfirmationPanel.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:jobDeleteForm />
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/ExternalJob/newJobDetail.jelly b/hudson-core/src/main/resources/hudson/model/ExternalJob/newJobDetail.jelly
index 2c36fbf2..9371e727 100644
--- a/hudson-core/src/main/resources/hudson/model/ExternalJob/newJobDetail.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ExternalJob/newJobDetail.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
${%body}
</div>
diff --git a/hudson-core/src/main/resources/hudson/model/ExternalJob/sidepanel.jelly b/hudson-core/src/main/resources/hudson/model/ExternalJob/sidepanel.jelly
index b13f061d..85be2b16 100644
--- a/hudson-core/src/main/resources/hudson/model/ExternalJob/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ExternalJob/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for the build view.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:header title="${it.name}">
<st:include page="rssHeader.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/ExternalRun/index.jelly b/hudson-core/src/main/resources/hudson/model/ExternalRun/index.jelly
index 528601ba..b68de8d4 100644
--- a/hudson-core/src/main/resources/hudson/model/ExternalRun/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ExternalRun/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:include page="console.jelly"/>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/ExternalRun/sidepanel.jelly b/hudson-core/src/main/resources/hudson/model/ExternalRun/sidepanel.jelly
index f4561659..e065ac52 100644
--- a/hudson-core/src/main/resources/hudson/model/ExternalRun/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ExternalRun/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for the build view.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:header title="${it.fullDisplayName}" />
<l:side-panel>
diff --git a/hudson-core/src/main/resources/hudson/model/FileParameterDefinition/config.jelly b/hudson-core/src/main/resources/hudson/model/FileParameterDefinition/config.jelly
index 7d784fe0..0a03d777 100644
--- a/hudson-core/src/main/resources/hudson/model/FileParameterDefinition/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/FileParameterDefinition/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/FileParameterDefinition/index.jelly b/hudson-core/src/main/resources/hudson/model/FileParameterDefinition/index.jelly
index cba92c01..731c84dc 100644
--- a/hudson-core/src/main/resources/hudson/model/FileParameterDefinition/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/FileParameterDefinition/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/FileParameterValue/value.jelly b/hudson-core/src/main/resources/hudson/model/FileParameterValue/value.jelly
index 91b84f58..0a6acffe 100644
--- a/hudson-core/src/main/resources/hudson/model/FileParameterValue/value.jelly
+++ b/hudson-core/src/main/resources/hudson/model/FileParameterValue/value.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/Fingerprint/index.jelly b/hudson-core/src/main/resources/hudson/model/Fingerprint/index.jelly
index 74b3c0f0..ae04f08f 100644
--- a/hudson-core/src/main/resources/hudson/model/Fingerprint/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Fingerprint/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<l:header title="${it.fileName}">
diff --git a/hudson-core/src/main/resources/hudson/model/FreeStyleProject/configure-advanced.jelly b/hudson-core/src/main/resources/hudson/model/FreeStyleProject/configure-advanced.jelly
index b20e7f63..a4cd8da5 100644
--- a/hudson-core/src/main/resources/hudson/model/FreeStyleProject/configure-advanced.jelly
+++ b/hudson-core/src/main/resources/hudson/model/FreeStyleProject/configure-advanced.jelly
@@ -18,6 +18,7 @@
<!--
Additional entries in the advanced section.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:p="/lib/hudson/project">
<p:config-customWorkspace />
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/FreeStyleProject/newJobDetail.jelly b/hudson-core/src/main/resources/hudson/model/FreeStyleProject/newJobDetail.jelly
index 2c36fbf2..9371e727 100644
--- a/hudson-core/src/main/resources/hudson/model/FreeStyleProject/newJobDetail.jelly
+++ b/hudson-core/src/main/resources/hudson/model/FreeStyleProject/newJobDetail.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
${%body}
</div>
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/_api.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/_api.jelly
index a8da94f9..7e73389c 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/_api.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/_api.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<h2>Create Job</h2>
<p>
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/_cli.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/_cli.jelly
index 19e09717..d7c974ec 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/_cli.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/_cli.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/_restart.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/_restart.jelly
index 4e076ff6..9f83feb1 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/_restart.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/_restart.jelly
@@ -16,6 +16,7 @@
<!-- Delete view -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="Restart Hudson">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/_safeRestart.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/_safeRestart.jelly
index 79e2d551..8cc4758c 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/_safeRestart.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/_safeRestart.jelly
@@ -16,6 +16,7 @@
<!-- Delete view -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="Safely Restart Hudson">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/_script.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/_script.jelly
index 97d3fea0..0555bda9 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/_script.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/_script.jelly
@@ -17,6 +17,7 @@
<!--
Called from doScript() to display the execution result and the form.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/_scriptText.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/_scriptText.jelly
index e6489daa..f95ef8d5 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/_scriptText.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/_scriptText.jelly
@@ -18,5 +18,6 @@
<!--
Called from doScriptText() to display the execution result.
-->
+<?jelly escape-by-default='false'?>
<st:compress xmlns:j="jelly:core" xmlns:st="jelly:stapler">
<st:contentType value="text/plain;charset=UTF-8" />${output}</st:compress>
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/accessDenied.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/accessDenied.jelly
index d48625d4..5e4b80d4 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/accessDenied.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/accessDenied.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true">
<!-- don't include sidepanel.jelly, which could reveal information -->
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/configureExecutors.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/configureExecutors.jelly
index 20e63b99..d204cfd9 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/configureExecutors.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/configureExecutors.jelly
@@ -19,6 +19,7 @@
This used to be where people configure executors before 1.271, so just in case people have bookmarked this page,
explain what happened.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="This page has moved">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/downgrade.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/downgrade.jelly
index 693773a2..1c723326 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/downgrade.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/downgrade.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div class="downgrade">
<j:if test="${app.updateCenter.downgradable}">
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/fingerprintCheck.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/fingerprintCheck.jelly
index 81158788..a6406953 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/fingerprintCheck.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/fingerprintCheck.jelly
@@ -18,6 +18,7 @@
<!--
New View page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/legend.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/legend.jelly
index 63d4d3fe..0809f13f 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/legend.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/legend.jelly
@@ -16,6 +16,7 @@
<!-- show the icon legend -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/load-statistics.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/load-statistics.jelly
index e0368e49..3448fa8f 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/load-statistics.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/load-statistics.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName} Load Statistics">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/login.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/login.jelly
index ccc8530f..6b9e9f63 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/login.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/login.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true">
<l:hasPermission permission="${app.READ}">
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/loginError.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/loginError.jelly
index 6feb8369..adab65be 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/loginError.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/loginError.jelly
@@ -16,6 +16,7 @@
<!-- report a login error -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:choose>
<j:new var="h" className="hudson.Functions" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/manage.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/manage.jelly
index 81c39af1..4f2108d1 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/manage.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/manage.jelly
@@ -18,6 +18,7 @@
<!--
Entrance to the configuration page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="${%Manage Hudson}" xmlns:local="local" permission="${app.ADMINISTER}">
<d:taglib uri="local">
@@ -94,7 +95,7 @@
<j:forEach var="m" items="${it.managementLinks}">
<j:if test="${m.iconFileName!=null}">
<local:feature icon="${m.iconFileName}" href="${m.urlName}" title="${m.displayName}">
- ${m.description}
+ <j:out value="${m.description}"/>
</local:feature>
</j:if>
</j:forEach>
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/newView.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/newView.jelly
index a4693c3a..2573866f 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/newView.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/newView.jelly
@@ -18,6 +18,7 @@
<!--
New View page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true" permission="${app.primaryView.CREATE}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/noPrincipal.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/noPrincipal.jelly
index f9325988..3cd8f6bf 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/noPrincipal.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/noPrincipal.jelly
@@ -16,6 +16,7 @@
<!-- there seems to be no authentication -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/opensearch.xml.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/opensearch.xml.jelly
index 4c84d974..03dc50ed 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/opensearch.xml.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/opensearch.xml.jelly
@@ -18,6 +18,7 @@
<!--
OpenSearch description for using search box from browsers
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
><st:contentType value="application/xml;charset=UTF-8"
/><OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/">
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/projectRelationship-help.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/projectRelationship-help.jelly
index 01ba8e85..6ebba2be 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/projectRelationship-help.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/projectRelationship-help.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/projectRelationship.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/projectRelationship.jelly
index 83809227..8483363e 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/projectRelationship.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/projectRelationship.jelly
@@ -18,6 +18,7 @@
<!--
Displays two projects side by side and show their relationship
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/sidepanel.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/sidepanel.jelly
index 5460d7e6..7f4d2de7 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/sidepanel.jelly
@@ -15,4 +15,5 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<st:include it="${it.primaryView}" page="sidepanel.jelly" xmlns:st="jelly:stapler" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/systemInfo.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/systemInfo.jelly
index 854cf4b7..245fa193 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/systemInfo.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/systemInfo.jelly
@@ -18,6 +18,7 @@
<!--
Various system information for diagnostics
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout permission="${app.ADMINISTER}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/threadDump.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/threadDump.jelly
index 845d7726..15088ece 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/threadDump.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/threadDump.jelly
@@ -18,6 +18,7 @@
<!--
Produces stack dump of all threads by using JMX.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout permission="${app.ADMINISTER}" title="${%Thread dump}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Hudson/whoAmI.jelly b/hudson-core/src/main/resources/hudson/model/Hudson/whoAmI.jelly
index 40b5af5f..dc4f0872 100644
--- a/hudson-core/src/main/resources/hudson/model/Hudson/whoAmI.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Hudson/whoAmI.jelly
@@ -16,6 +16,7 @@
<!-- show debug information about the current user -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:layout>
<l:hasPermission permission="${app.READ}">
diff --git a/hudson-core/src/main/resources/hudson/model/JDK/config.jelly b/hudson-core/src/main/resources/hudson/model/JDK/config.jelly
index 74cb3aec..48ec2d60 100644
--- a/hudson-core/src/main/resources/hudson/model/JDK/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/JDK/config.jelly
@@ -18,6 +18,7 @@
<!--
Config page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Name}" field="name">
<f:textbox />
diff --git a/hudson-core/src/main/resources/hudson/model/Job/_api.jelly b/hudson-core/src/main/resources/hudson/model/Job/_api.jelly
index a7284515..e12caffa 100644
--- a/hudson-core/src/main/resources/hudson/model/Job/_api.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Job/_api.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<h2>Fetch/Update config.xml</h2>
<p>
diff --git a/hudson-core/src/main/resources/hudson/model/Job/buildTimeTrend.jelly b/hudson-core/src/main/resources/hudson/model/Job/buildTimeTrend.jelly
index 3f3c5db5..17390ecc 100644
--- a/hudson-core/src/main/resources/hudson/model/Job/buildTimeTrend.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Job/buildTimeTrend.jelly
@@ -16,6 +16,7 @@
<!-- Displays the chart that show how long builds are taking -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${%title(it.displayName)}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Job/configure-entries.jelly b/hudson-core/src/main/resources/hudson/model/Job/configure-entries.jelly
index 24c36275..f83f3003 100644
--- a/hudson-core/src/main/resources/hudson/model/Job/configure-entries.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Job/configure-entries.jelly
@@ -18,4 +18,5 @@
<!--
derived class should override this JSP to put additional entries to the config page.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" />
diff --git a/hudson-core/src/main/resources/hudson/model/Job/configure.jelly b/hudson-core/src/main/resources/hudson/model/Job/configure.jelly
index 82c5d92e..cb32a653 100644
--- a/hudson-core/src/main/resources/hudson/model/Job/configure.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Job/configure.jelly
@@ -18,6 +18,7 @@
<!--
Config page. derived class specific entries should go to configure-entries.jsp
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName} Config" norefresh="true" permission="${it.EXTENDED_READ}">
<j:set var="jobUrl" value="${h.getNearestAncestorUrl(request,it)}"/>
diff --git a/hudson-core/src/main/resources/hudson/model/Job/index.jelly b/hudson-core/src/main/resources/hudson/model/Job/index.jelly
index d4549733..348b412f 100644
--- a/hudson-core/src/main/resources/hudson/model/Job/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Job/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
<l:layout title="${it.displayName}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Job/jobpropertysummaries.jelly b/hudson-core/src/main/resources/hudson/model/Job/jobpropertysummaries.jelly
index 1ee55475..5945eee0 100644
--- a/hudson-core/src/main/resources/hudson/model/Job/jobpropertysummaries.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Job/jobpropertysummaries.jelly
@@ -16,6 +16,7 @@
<!-- display permalinks of the page -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler">
<!-- give properties a chance to contribute summary item -->
<j:forEach var="p" items="${it.properties.values()}">
diff --git a/hudson-core/src/main/resources/hudson/model/Job/main.jelly b/hudson-core/src/main/resources/hudson/model/Job/main.jelly
index 6f71704c..7eeb15e0 100644
--- a/hudson-core/src/main/resources/hudson/model/Job/main.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Job/main.jelly
@@ -16,4 +16,5 @@
<!-- place holder for the derived types to add more contents -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" />
diff --git a/hudson-core/src/main/resources/hudson/model/Job/newInstanceDetail.jelly b/hudson-core/src/main/resources/hudson/model/Job/newInstanceDetail.jelly
index 5f9e3d16..bdc8b717 100644
--- a/hudson-core/src/main/resources/hudson/model/Job/newInstanceDetail.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Job/newInstanceDetail.jelly
@@ -37,6 +37,7 @@
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<!--
For historical reasons, jobs used "newJobDetail.jelly".
diff --git a/hudson-core/src/main/resources/hudson/model/Job/permalinks.jelly b/hudson-core/src/main/resources/hudson/model/Job/permalinks.jelly
index 7493ff2b..8f481eea 100644
--- a/hudson-core/src/main/resources/hudson/model/Job/permalinks.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Job/permalinks.jelly
@@ -16,6 +16,7 @@
<!-- display permalinks of the page -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
<h2>${%Permalinks}</h2>
<ul>
diff --git a/hudson-core/src/main/resources/hudson/model/Job/rename.jelly b/hudson-core/src/main/resources/hudson/model/Job/rename.jelly
index ab0f98ad..6cf9564a 100644
--- a/hudson-core/src/main/resources/hudson/model/Job/rename.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Job/rename.jelly
@@ -16,6 +16,7 @@
<!-- Rename project -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Job/rssHeader.jelly b/hudson-core/src/main/resources/hudson/model/Job/rssHeader.jelly
index d88b2eef..9c891757 100644
--- a/hudson-core/src/main/resources/hudson/model/Job/rssHeader.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Job/rssHeader.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<link rel="alternate" title="Hudson:${it.name} (all builds)" href="rssAll" type="application/rss+xml" />
<link rel="alternate" title="Hudson:${it.name} (all builds) (RSS 2.0)" href="rssAll?flavor=rss20" type="application/rss+xml" />
diff --git a/hudson-core/src/main/resources/hudson/model/Label/index.jelly b/hudson-core/src/main/resources/hudson/model/Label/index.jelly
index 77401eab..0fc4c429 100644
--- a/hudson-core/src/main/resources/hudson/model/Label/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Label/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Label/load-statistics.jelly b/hudson-core/src/main/resources/hudson/model/Label/load-statistics.jelly
index 99b7b745..25ea369d 100644
--- a/hudson-core/src/main/resources/hudson/model/Label/load-statistics.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Label/load-statistics.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName} Load Statistics">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Label/sidepanel.jelly b/hudson-core/src/main/resources/hudson/model/Label/sidepanel.jelly
index 189fb5cc..e7de1e24 100644
--- a/hudson-core/src/main/resources/hudson/model/Label/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Label/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for a label.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:header title="Label ${it.displayName}" />
<l:side-panel>
diff --git a/hudson-core/src/main/resources/hudson/model/ListView/newViewDetail.jelly b/hudson-core/src/main/resources/hudson/model/ListView/newViewDetail.jelly
index 58dbb52b..fefc4105 100644
--- a/hudson-core/src/main/resources/hudson/model/ListView/newViewDetail.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ListView/newViewDetail.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
${%blurb}
</div>
diff --git a/hudson-core/src/main/resources/hudson/model/LoadStatistics/main.jelly b/hudson-core/src/main/resources/hudson/model/LoadStatistics/main.jelly
index 1a301e4d..6fa56993 100644
--- a/hudson-core/src/main/resources/hudson/model/LoadStatistics/main.jelly
+++ b/hudson-core/src/main/resources/hudson/model/LoadStatistics/main.jelly
@@ -16,6 +16,7 @@
<!-- renders an HTML fragment that shows trend graph -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<h1>
<img src="${imagesURL}/48x48/monitor.png" alt=""/>
diff --git a/hudson-core/src/main/resources/hudson/model/MyView/newViewDetail.jelly b/hudson-core/src/main/resources/hudson/model/MyView/newViewDetail.jelly
index 58dbb52b..fefc4105 100644
--- a/hudson-core/src/main/resources/hudson/model/MyView/newViewDetail.jelly
+++ b/hudson-core/src/main/resources/hudson/model/MyView/newViewDetail.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
${%blurb}
</div>
diff --git a/hudson-core/src/main/resources/hudson/model/MyView/noJob.jelly b/hudson-core/src/main/resources/hudson/model/MyView/noJob.jelly
index 42511c1b..6ac3946b 100644
--- a/hudson-core/src/main/resources/hudson/model/MyView/noJob.jelly
+++ b/hudson-core/src/main/resources/hudson/model/MyView/noJob.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
${%blurb}
</div>
diff --git a/hudson-core/src/main/resources/hudson/model/MyViewsProperty/config.jelly b/hudson-core/src/main/resources/hudson/model/MyViewsProperty/config.jelly
index 282f9e86..ff272ddb 100644
--- a/hudson-core/src/main/resources/hudson/model/MyViewsProperty/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/MyViewsProperty/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Default View}"
description="${%description}">
diff --git a/hudson-core/src/main/resources/hudson/model/MyViewsProperty/newView.jelly b/hudson-core/src/main/resources/hudson/model/MyViewsProperty/newView.jelly
index 5ffddfd8..d5b4aa83 100644
--- a/hudson-core/src/main/resources/hudson/model/MyViewsProperty/newView.jelly
+++ b/hudson-core/src/main/resources/hudson/model/MyViewsProperty/newView.jelly
@@ -20,6 +20,7 @@
TODO remove duplication with Hudson/newView.jelly
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true" permission="${app.primaryView.CREATE}">
<st:include page="sidepanel.jelly" it="${it.user}"/>
diff --git a/hudson-core/src/main/resources/hudson/model/NoFingerprintMatch/index.jelly b/hudson-core/src/main/resources/hudson/model/NoFingerprintMatch/index.jelly
index 8d456bdc..8db7d94a 100644
--- a/hudson-core/src/main/resources/hudson/model/NoFingerprintMatch/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/NoFingerprintMatch/index.jelly
@@ -16,6 +16,7 @@
<!-- used when fingerprint had no match -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<l:header title="${%No matching record found}" />
@@ -31,7 +32,7 @@
</h1>
<p>
- ${%description(h.escape(it.displayName))}
+ ${%description(it.displayName)}
</p>
<ol>
<li>
diff --git a/hudson-core/src/main/resources/hudson/model/ParameterDefinition/config.jelly b/hudson-core/src/main/resources/hudson/model/ParameterDefinition/config.jelly
index 75467f24..52bdddf2 100644
--- a/hudson-core/src/main/resources/hudson/model/ParameterDefinition/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ParameterDefinition/config.jelly
@@ -18,6 +18,7 @@
<!--
This Jelly view shows UI for configuring parameter definitions as a part of the job configuration.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/ParametersDefinitionProperty/config.jelly b/hudson-core/src/main/resources/hudson/model/ParametersDefinitionProperty/config.jelly
index de2f64e3..88852fd4 100644
--- a/hudson-core/src/main/resources/hudson/model/ParametersDefinitionProperty/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ParametersDefinitionProperty/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
@@ -31,4 +32,4 @@
addCaption="${%Add Parameter}" />
</f:nested>
</f:optionalBlock>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/ParametersDefinitionProperty/index.jelly b/hudson-core/src/main/resources/hudson/model/ParametersDefinitionProperty/index.jelly
index 1d5476b1..39061e5e 100644
--- a/hudson-core/src/main/resources/hudson/model/ParametersDefinitionProperty/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ParametersDefinitionProperty/index.jelly
@@ -18,6 +18,7 @@
<!--
This view is rendered as /hudson/job/XYZ/build
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
@@ -35,7 +36,7 @@
<j:invokeStatic var="escapedValue" className="hudson.Util" method="escape">
<j:arg value="${it.owner.description}"/>
</j:invokeStatic>
- ${escapedValue}
+ <j:out value="${escapedValue}"/>
</p>
</j:if>
<p>${%description}</p>
@@ -54,4 +55,4 @@
</f:form>
</l:main-panel>
</l:layout>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/PasswordParameterDefinition/config.jelly b/hudson-core/src/main/resources/hudson/model/PasswordParameterDefinition/config.jelly
index 4cf58283..c29cd24a 100644
--- a/hudson-core/src/main/resources/hudson/model/PasswordParameterDefinition/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/PasswordParameterDefinition/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/PasswordParameterDefinition/index.jelly b/hudson-core/src/main/resources/hudson/model/PasswordParameterDefinition/index.jelly
index c0c5ba53..6e0fbbb4 100644
--- a/hudson-core/src/main/resources/hudson/model/PasswordParameterDefinition/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/PasswordParameterDefinition/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/PasswordParameterValue/value.jelly b/hudson-core/src/main/resources/hudson/model/PasswordParameterValue/value.jelly
index 390c2521..6d7e7681 100644
--- a/hudson-core/src/main/resources/hudson/model/PasswordParameterValue/value.jelly
+++ b/hudson-core/src/main/resources/hudson/model/PasswordParameterValue/value.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/PermalinkProjectAction/Permalink/link.jelly b/hudson-core/src/main/resources/hudson/model/PermalinkProjectAction/Permalink/link.jelly
index 30c8225b..6450dd44 100644
--- a/hudson-core/src/main/resources/hudson/model/PermalinkProjectAction/Permalink/link.jelly
+++ b/hudson-core/src/main/resources/hudson/model/PermalinkProjectAction/Permalink/link.jelly
@@ -20,6 +20,7 @@
'job' must be bound to the parent job scope.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:p="/lib/hudson/project">
<j:set var="b" value="${it.resolve(job)}"/>
<j:if test="${b!=null}">
diff --git a/hudson-core/src/main/resources/hudson/model/Project/configure-entries.jelly b/hudson-core/src/main/resources/hudson/model/Project/configure-entries.jelly
index 60b0ea28..eaa82158 100644
--- a/hudson-core/src/main/resources/hudson/model/Project/configure-entries.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Project/configure-entries.jelly
@@ -18,6 +18,7 @@
<!--
Config page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:p="/lib/hudson/project">
<j:set var="jobUrl" value="${h.getNearestAncestorUrl(request,it)}"/>
<st:include page="configure-common.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/ProxyView/configure-entries.jelly b/hudson-core/src/main/resources/hudson/model/ProxyView/configure-entries.jelly
index 1f5e724b..7d4c8079 100644
--- a/hudson-core/src/main/resources/hudson/model/ProxyView/configure-entries.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ProxyView/configure-entries.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%View name}"
description="${%The name of a global view that will be shown.}">
diff --git a/hudson-core/src/main/resources/hudson/model/ProxyView/main.jelly b/hudson-core/src/main/resources/hudson/model/ProxyView/main.jelly
index 45384764..24f93ebb 100644
--- a/hudson-core/src/main/resources/hudson/model/ProxyView/main.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ProxyView/main.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:include it="${it.proxiedView}" page="main.jelly"/>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/ProxyView/newViewDetail.jelly b/hudson-core/src/main/resources/hudson/model/ProxyView/newViewDetail.jelly
index 0d582df5..146b7d8d 100644
--- a/hudson-core/src/main/resources/hudson/model/ProxyView/newViewDetail.jelly
+++ b/hudson-core/src/main/resources/hudson/model/ProxyView/newViewDetail.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
${%Shows the content of a global view.}
</div>
diff --git a/hudson-core/src/main/resources/hudson/model/Run/KeepLogBuildBadge/badge.jelly b/hudson-core/src/main/resources/hudson/model/Run/KeepLogBuildBadge/badge.jelly
index f5102bf0..4354f7e5 100644
--- a/hudson-core/src/main/resources/hudson/model/Run/KeepLogBuildBadge/badge.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Run/KeepLogBuildBadge/badge.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<img width="16" height="16"
title="${%Keep this build forever}" alt="[saved]"
src="${imagesURL}/16x16/lock.png"/>
diff --git a/hudson-core/src/main/resources/hudson/model/Run/_api.jelly b/hudson-core/src/main/resources/hudson/model/Run/_api.jelly
index 931f8080..32f7695d 100644
--- a/hudson-core/src/main/resources/hudson/model/Run/_api.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Run/_api.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<h2>Other Useful URLs</h2>
<dl>
diff --git a/hudson-core/src/main/resources/hudson/model/Run/artifacts-index.jelly b/hudson-core/src/main/resources/hudson/model/Run/artifacts-index.jelly
index cfb9beed..be300219 100644
--- a/hudson-core/src/main/resources/hudson/model/Run/artifacts-index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Run/artifacts-index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:if test="${!h.isArtifactsPermissionEnabled() or h.isArtifactsPermissionEnabled() and h.hasPermission(it.ARTIFACTS)}">
<l:layout title="${it.fullDisplayName} Artifacts">
@@ -25,7 +26,7 @@
</t:buildCaption>
<ul>
<j:forEach var="f" items="${it.artifacts}">
- <li><a href="artifact/${f.href}">${h.xmlEscape(f.displayPath)}</a></li>
+ <li><a href="artifact/${f.href}">${f.displayPath}</a></li>
</j:forEach>
</ul>
</l:main-panel>
diff --git a/hudson-core/src/main/resources/hudson/model/Run/configure.jelly b/hudson-core/src/main/resources/hudson/model/Run/configure.jelly
index eb7fd598..dd261c83 100644
--- a/hudson-core/src/main/resources/hudson/model/Run/configure.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Run/configure.jelly
@@ -37,6 +37,7 @@
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName} Config" norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Run/confirmDelete.jelly b/hudson-core/src/main/resources/hudson/model/Run/confirmDelete.jelly
index 255a1a24..09a1f91a 100644
--- a/hudson-core/src/main/resources/hudson/model/Run/confirmDelete.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Run/confirmDelete.jelly
@@ -16,6 +16,7 @@
<!-- Confirm deletion of the build/run -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.fullDisplayName}" norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Run/console.jelly b/hudson-core/src/main/resources/hudson/model/Run/console.jelly
index f5799d5e..103355b3 100644
--- a/hudson-core/src/main/resources/hudson/model/Run/console.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Run/console.jelly
@@ -18,6 +18,7 @@
<!--
Displays the console output
-->
+<?jelly escape-by-default='true'?>
<st:compress xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.fullDisplayName} Console" norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Run/consoleFull.jelly b/hudson-core/src/main/resources/hudson/model/Run/consoleFull.jelly
index b545f69d..6adf4f16 100644
--- a/hudson-core/src/main/resources/hudson/model/Run/consoleFull.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Run/consoleFull.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<st:compress xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:set var="consoleFull" value="true" />
<st:include page="console.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/Run/delete.jelly b/hudson-core/src/main/resources/hudson/model/Run/delete.jelly
index bd2d9f6c..27ea38e4 100644
--- a/hudson-core/src/main/resources/hudson/model/Run/delete.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Run/delete.jelly
@@ -18,6 +18,7 @@
<!--
Displays the button to delete the build.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:if test="${!it.keepLog and !it.building}">
<form method="get" action="confirmDelete" style="margin-top:1em">
@@ -54,4 +55,4 @@
<h4>${%cannotMsg} ${%reasonMsg}</h4>
<input type="button" class="no" value="${%Ok}" />
</div>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/Run/logKeep.jelly b/hudson-core/src/main/resources/hudson/model/Run/logKeep.jelly
index e4786dc6..e42218a6 100644
--- a/hudson-core/src/main/resources/hudson/model/Run/logKeep.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Run/logKeep.jelly
@@ -18,6 +18,7 @@
<!--
Displays the toggle button to keep/don't-keep the log file.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:if test="${it.parent.logRotator!=null}">
<form method="get" action="toggleLogKeep" style="margin-top:1em">
diff --git a/hudson-core/src/main/resources/hudson/model/RunParameterDefinition/config.jelly b/hudson-core/src/main/resources/hudson/model/RunParameterDefinition/config.jelly
index 99ebae86..bc045f8b 100644
--- a/hudson-core/src/main/resources/hudson/model/RunParameterDefinition/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/RunParameterDefinition/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/RunParameterDefinition/index.jelly b/hudson-core/src/main/resources/hudson/model/RunParameterDefinition/index.jelly
index 76611edb..7a479ff9 100644
--- a/hudson-core/src/main/resources/hudson/model/RunParameterDefinition/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/RunParameterDefinition/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/RunParameterValue/value.jelly b/hudson-core/src/main/resources/hudson/model/RunParameterValue/value.jelly
index c9d42df7..74fad3b5 100644
--- a/hudson-core/src/main/resources/hudson/model/RunParameterValue/value.jelly
+++ b/hudson-core/src/main/resources/hudson/model/RunParameterValue/value.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/Slave/help-launcher.jelly b/hudson-core/src/main/resources/hudson/model/Slave/help-launcher.jelly
index e1c6d6d8..a1200ebd 100644
--- a/hudson-core/src/main/resources/hudson/model/Slave/help-launcher.jelly
+++ b/hudson-core/src/main/resources/hudson/model/Slave/help-launcher.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:ajax>
<div>
diff --git a/hudson-core/src/main/resources/hudson/model/StringParameterDefinition/config.jelly b/hudson-core/src/main/resources/hudson/model/StringParameterDefinition/config.jelly
index 753a60b6..df569a22 100644
--- a/hudson-core/src/main/resources/hudson/model/StringParameterDefinition/config.jelly
+++ b/hudson-core/src/main/resources/hudson/model/StringParameterDefinition/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/StringParameterDefinition/index.jelly b/hudson-core/src/main/resources/hudson/model/StringParameterDefinition/index.jelly
index 1f345b6c..0b456ec9 100644
--- a/hudson-core/src/main/resources/hudson/model/StringParameterDefinition/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/StringParameterDefinition/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/StringParameterValue/value.jelly b/hudson-core/src/main/resources/hudson/model/StringParameterValue/value.jelly
index b6eada7f..8560bf20 100644
--- a/hudson-core/src/main/resources/hudson/model/StringParameterValue/value.jelly
+++ b/hudson-core/src/main/resources/hudson/model/StringParameterValue/value.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
diff --git a/hudson-core/src/main/resources/hudson/model/TaskAction/log.jelly b/hudson-core/src/main/resources/hudson/model/TaskAction/log.jelly
index 39df52c3..dc94df8c 100644
--- a/hudson-core/src/main/resources/hudson/model/TaskAction/log.jelly
+++ b/hudson-core/src/main/resources/hudson/model/TaskAction/log.jelly
@@ -18,6 +18,7 @@
<!--
Include this in the main page to display the log
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:choose>
<!-- Do progressive console output -->
diff --git a/hudson-core/src/main/resources/hudson/model/TreeView/ajaxRows.jelly b/hudson-core/src/main/resources/hudson/model/TreeView/ajaxRows.jelly
index 963d5e48..f2fa1cdf 100644
--- a/hudson-core/src/main/resources/hudson/model/TreeView/ajaxRows.jelly
+++ b/hudson-core/src/main/resources/hudson/model/TreeView/ajaxRows.jelly
@@ -18,6 +18,7 @@
<!--
Used to render the folder content through an AJAX call.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:ajax>
<t:setIconSize/>
diff --git a/hudson-core/src/main/resources/hudson/model/TreeView/main.jelly b/hudson-core/src/main/resources/hudson/model/TreeView/main.jelly
index a26e267e..d939fe94 100644
--- a/hudson-core/src/main/resources/hudson/model/TreeView/main.jelly
+++ b/hudson-core/src/main/resources/hudson/model/TreeView/main.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:choose>
<j:when test="${empty(items)}">
diff --git a/hudson-core/src/main/resources/hudson/model/TreeView/newView.jelly b/hudson-core/src/main/resources/hudson/model/TreeView/newView.jelly
index 0cca7b70..53666e8b 100644
--- a/hudson-core/src/main/resources/hudson/model/TreeView/newView.jelly
+++ b/hudson-core/src/main/resources/hudson/model/TreeView/newView.jelly
@@ -15,4 +15,5 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<st:include from="${app}" page="newView.jelly" xmlns:st="jelly:stapler" />
diff --git a/hudson-core/src/main/resources/hudson/model/TreeView/newViewDetail.jelly b/hudson-core/src/main/resources/hudson/model/TreeView/newViewDetail.jelly
index 1c4adfaa..4c7c3bad 100644
--- a/hudson-core/src/main/resources/hudson/model/TreeView/newViewDetail.jelly
+++ b/hudson-core/src/main/resources/hudson/model/TreeView/newViewDetail.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
<b>Experimental:</b> show hierarchical views
</div>
diff --git a/hudson-core/src/main/resources/hudson/model/TreeView/sidepanel2.jelly b/hudson-core/src/main/resources/hudson/model/TreeView/sidepanel2.jelly
index 6542c4cf..16ed75c3 100644
--- a/hudson-core/src/main/resources/hudson/model/TreeView/sidepanel2.jelly
+++ b/hudson-core/src/main/resources/hudson/model/TreeView/sidepanel2.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for the build view.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:task icon="images/32x32/folder.png" href="newView" title="${%New View}" permission="${it.CONFIGURE}" />
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/UpdateCenter/ConnectionCheckJob/row.jelly b/hudson-core/src/main/resources/hudson/model/UpdateCenter/ConnectionCheckJob/row.jelly
index 7397dcbf..38627aae 100644
--- a/hudson-core/src/main/resources/hudson/model/UpdateCenter/ConnectionCheckJob/row.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UpdateCenter/ConnectionCheckJob/row.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<tr id="row${it.id}">
<td style="vertical-align: top; padding-right:1em">${%Preparation}</td>
@@ -22,7 +23,7 @@
<td id="prepStatus${size(statuses)}">
<ul>
<j:forEach var="s" items="${statuses}">
- <li>${s}</li>
+ <li><j:out value="${s}"/></li>
</j:forEach>
</ul>
</td>
diff --git a/hudson-core/src/main/resources/hudson/model/UpdateCenter/CoreUpdateMonitor/message.jelly b/hudson-core/src/main/resources/hudson/model/UpdateCenter/CoreUpdateMonitor/message.jelly
index d98adda7..2bf06471 100644
--- a/hudson-core/src/main/resources/hudson/model/UpdateCenter/CoreUpdateMonitor/message.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UpdateCenter/CoreUpdateMonitor/message.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div class="warning">
<j:set var="ucData" value="${it.data}" />
diff --git a/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Failure/status.jelly b/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Failure/status.jelly
index 74d80841..7238334b 100644
--- a/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Failure/status.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Failure/status.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div>
<img src="${imagesURL}/24x24/red.png" alt=""/> ${%Failure}
diff --git a/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Installing/status.jelly b/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Installing/status.jelly
index 588491c8..cdc7412f 100644
--- a/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Installing/status.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Installing/status.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div>
<img src="${imagesURL}/24x24/grey_anime.gif" alt=""/> ${%Installing}
diff --git a/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Pending/status.jelly b/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Pending/status.jelly
index ee6bf68d..1eea4f02 100644
--- a/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Pending/status.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Pending/status.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<img src="${imagesURL}/24x24/grey.png" alt=""/> ${%Pending}
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Success/status.jelly b/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Success/status.jelly
index 97608421..aa00ea83 100644
--- a/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Success/status.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/Success/status.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<img src="${imagesURL}/24x24/blue.png" alt=""/> ${%Success}
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/row.jelly b/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/row.jelly
index fb4e8a92..e12ace5e 100644
--- a/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/row.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UpdateCenter/DownloadJob/row.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<tr id="row${it.id}">
<td style="vertical-align: top; padding-right:1em">${it.name}</td>
diff --git a/hudson-core/src/main/resources/hudson/model/UpdateCenter/PageDecoratorImpl/footer.jelly b/hudson-core/src/main/resources/hudson/model/UpdateCenter/PageDecoratorImpl/footer.jelly
index 9f46a57c..7023a1fa 100644
--- a/hudson-core/src/main/resources/hudson/model/UpdateCenter/PageDecoratorImpl/footer.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UpdateCenter/PageDecoratorImpl/footer.jelly
@@ -22,6 +22,7 @@
This file is pulled into the layout.jelly
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:forEach var="site" items="${app.updateCenter.sites}">
<j:if test="${site.due or forcedUpdateCheck}">
diff --git a/hudson-core/src/main/resources/hudson/model/UpdateCenter/body.jelly b/hudson-core/src/main/resources/hudson/model/UpdateCenter/body.jelly
index e4a51e7a..a0fed3a0 100644
--- a/hudson-core/src/main/resources/hudson/model/UpdateCenter/body.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UpdateCenter/body.jelly
@@ -19,6 +19,7 @@
Requested by the browser separately to partially update the page.
Also used as a part of index.jelly rendering.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:ajax>
<table id="log">
diff --git a/hudson-core/src/main/resources/hudson/model/UpdateCenter/index.jelly b/hudson-core/src/main/resources/hudson/model/UpdateCenter/index.jelly
index 52559ac4..62d3cb37 100644
--- a/hudson-core/src/main/resources/hudson/model/UpdateCenter/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UpdateCenter/index.jelly
@@ -18,6 +18,7 @@
<!--
This page shows the status of the plugin installation
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="${%Update Center}" permission="${app.ADMINISTER}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/UpdateCenter/sidepanel.jelly b/hudson-core/src/main/resources/hudson/model/UpdateCenter/sidepanel.jelly
index e8cb9480..377b4cc1 100644
--- a/hudson-core/src/main/resources/hudson/model/UpdateCenter/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UpdateCenter/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:header />
<l:side-panel>
diff --git a/hudson-core/src/main/resources/hudson/model/UsageStatistics/footer.jelly b/hudson-core/src/main/resources/hudson/model/UsageStatistics/footer.jelly
index 1f62d0ce..9f44fa2a 100644
--- a/hudson-core/src/main/resources/hudson/model/UsageStatistics/footer.jelly
+++ b/hudson-core/src/main/resources/hudson/model/UsageStatistics/footer.jelly
@@ -22,6 +22,7 @@
This file is pulled into the layout.jelly
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:if test="${it.due}">
<script>
diff --git a/hudson-core/src/main/resources/hudson/model/User/deleteConfirmationPanel.jelly b/hudson-core/src/main/resources/hudson/model/User/deleteConfirmationPanel.jelly
index 4afc2521..d93da7d8 100644
--- a/hudson-core/src/main/resources/hudson/model/User/deleteConfirmationPanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/User/deleteConfirmationPanel.jelly
@@ -14,10 +14,11 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
<form method="post" action="doDelete">
<h4>${%Are you sure about deleting the user from Hudson?}</h4>
<input type="submit" class="yes" value="${%Yes}" />
<input type="button" class="no" value="${%No}" />
</form>
-</div> \ No newline at end of file
+</div>
diff --git a/hudson-core/src/main/resources/hudson/model/View/People/index.jelly b/hudson-core/src/main/resources/hudson/model/View/People/index.jelly
index 9a7112e2..05973ca5 100644
--- a/hudson-core/src/main/resources/hudson/model/View/People/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/People/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="People - ${it.parent.viewName}">
<st:include page="sidepanel.jelly" it="${it.parent}" />
diff --git a/hudson-core/src/main/resources/hudson/model/View/ajaxBuildQueue.jelly b/hudson-core/src/main/resources/hudson/model/View/ajaxBuildQueue.jelly
index 67797a66..675e036b 100644
--- a/hudson-core/src/main/resources/hudson/model/View/ajaxBuildQueue.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/ajaxBuildQueue.jelly
@@ -18,6 +18,7 @@
<!--
Used to asynchronously update build queue
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:ajax>
<t:queue items="${it.queueItems}" />
diff --git a/hudson-core/src/main/resources/hudson/model/View/ajaxExecutors.jelly b/hudson-core/src/main/resources/hudson/model/View/ajaxExecutors.jelly
index 3971806d..8d4a8fd2 100644
--- a/hudson-core/src/main/resources/hudson/model/View/ajaxExecutors.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/ajaxExecutors.jelly
@@ -18,6 +18,7 @@
<!--
Used to asynchronously update executor queue
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:ajax>
<t:executors computers="${it.computers}"/>
diff --git a/hudson-core/src/main/resources/hudson/model/View/builds.jelly b/hudson-core/src/main/resources/hudson/model/View/builds.jelly
index 48684567..1fb20108 100644
--- a/hudson-core/src/main/resources/hudson/model/View/builds.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/builds.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/View/cc.xml.jelly b/hudson-core/src/main/resources/hudson/model/View/cc.xml.jelly
index 9be9c1f2..ca87af96 100644
--- a/hudson-core/src/main/resources/hudson/model/View/cc.xml.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/cc.xml.jelly
@@ -19,6 +19,7 @@
Generate status XML compatible with CruiseControl.
See http://confluence.public.thoughtworks.org/display/CI/Multiple+Project+Summary+Reporting+Standard
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:contentType value="text/xml;charset=UTF-8" />
<j:new var="h" className="hudson.Functions" />
diff --git a/hudson-core/src/main/resources/hudson/model/View/configure.jelly b/hudson-core/src/main/resources/hudson/model/View/configure.jelly
index 32cd099d..770c3740 100644
--- a/hudson-core/src/main/resources/hudson/model/View/configure.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/configure.jelly
@@ -18,6 +18,7 @@
<!--
Edit View Page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/View/delete.jelly b/hudson-core/src/main/resources/hudson/model/View/delete.jelly
index 70f964b9..e22aec32 100644
--- a/hudson-core/src/main/resources/hudson/model/View/delete.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/delete.jelly
@@ -16,6 +16,7 @@
<!-- Delete view -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/model/View/deleteConfirmationPanel.jelly b/hudson-core/src/main/resources/hudson/model/View/deleteConfirmationPanel.jelly
index 24f10ef0..1118ca38 100644
--- a/hudson-core/src/main/resources/hudson/model/View/deleteConfirmationPanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/deleteConfirmationPanel.jelly
@@ -14,10 +14,11 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
<form method="post" action="doDelete">
<h4>${%Are you sure about deleting the view?}</h4>
<input type="submit" class="yes" value="${%Yes}" />
<input type="button" class="no" value="${%No}" />
</form>
-</div> \ No newline at end of file
+</div>
diff --git a/hudson-core/src/main/resources/hudson/model/View/index.jelly b/hudson-core/src/main/resources/hudson/model/View/index.jelly
index 69369071..a0c6a563 100644
--- a/hudson-core/src/main/resources/hudson/model/View/index.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<st:compress xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:if test="${request.servletPath=='/' || request.servletPath==''}">
<st:header name="X-Hudson" value="${servletContext.getAttribute('version')}" />
diff --git a/hudson-core/src/main/resources/hudson/model/View/main.jelly b/hudson-core/src/main/resources/hudson/model/View/main.jelly
index cd8d7012..eec6d598 100644
--- a/hudson-core/src/main/resources/hudson/model/View/main.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/main.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:choose>
<j:when test="${empty(items)}">
diff --git a/hudson-core/src/main/resources/hudson/model/View/newJob.jelly b/hudson-core/src/main/resources/hudson/model/View/newJob.jelly
index ab8fe12d..0ebacad8 100644
--- a/hudson-core/src/main/resources/hudson/model/View/newJob.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/newJob.jelly
@@ -18,6 +18,7 @@
<!--
"New Project" page.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<j:getStatic var="permission" className="hudson.model.Item" field="CREATE"/>
<l:layout norefresh="true" permission="${permission}" title="${%New Job}">
diff --git a/hudson-core/src/main/resources/hudson/model/View/noJob.jelly b/hudson-core/src/main/resources/hudson/model/View/noJob.jelly
index d9e76e81..4bb0bef9 100644
--- a/hudson-core/src/main/resources/hudson/model/View/noJob.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/noJob.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<style type="text/css">
#noJobDiv {
diff --git a/hudson-core/src/main/resources/hudson/model/View/sidepanel.jelly b/hudson-core/src/main/resources/hudson/model/View/sidepanel.jelly
index 8da65380..325c1f4c 100644
--- a/hudson-core/src/main/resources/hudson/model/View/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for the build view.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:header title="Hudson">
<link rel="alternate" title="Hudson:${it.viewName} (all builds)" href="${rootURL}/${it.url}rssAll" type="application/rss+xml" />
diff --git a/hudson-core/src/main/resources/hudson/model/View/sidepanel2.jelly b/hudson-core/src/main/resources/hudson/model/View/sidepanel2.jelly
index f4a85911..1a74a323 100644
--- a/hudson-core/src/main/resources/hudson/model/View/sidepanel2.jelly
+++ b/hudson-core/src/main/resources/hudson/model/View/sidepanel2.jelly
@@ -17,6 +17,7 @@
<!--
Side panel for the build view.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<j:if test="${it.hasPermission(it.CREATE)}">
<l:task icon="images/32x32/folder.png" href="${rootURL}/newView" title="${%New View}" permission="${it.CONFIGURE}"/>
diff --git a/hudson-core/src/main/resources/hudson/model/labels/LabelAtom/configure.jelly b/hudson-core/src/main/resources/hudson/model/labels/LabelAtom/configure.jelly
index 806cfc42..bfbc45ab 100644
--- a/hudson-core/src/main/resources/hudson/model/labels/LabelAtom/configure.jelly
+++ b/hudson-core/src/main/resources/hudson/model/labels/LabelAtom/configure.jelly
@@ -18,6 +18,7 @@
<!--
Config page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true" permission="${app.ADMINISTER}" title="${%title(it.displayName)}">
diff --git a/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseLabelIsBusy/summary.jelly b/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseLabelIsBusy/summary.jelly
index 0d23fe34..3b547ddf 100644
--- a/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseLabelIsBusy/summary.jelly
+++ b/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseLabelIsBusy/summary.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:structuredMessageFormat key="description">
<st:structuredMessageArgument>
diff --git a/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseLabelIsOffline/summary.jelly b/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseLabelIsOffline/summary.jelly
index 0d23fe34..3b547ddf 100644
--- a/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseLabelIsOffline/summary.jelly
+++ b/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseLabelIsOffline/summary.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:structuredMessageFormat key="description">
<st:structuredMessageArgument>
diff --git a/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseNodeIsBusy/summary.jelly b/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseNodeIsBusy/summary.jelly
index c904371b..06b5dc4f 100644
--- a/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseNodeIsBusy/summary.jelly
+++ b/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseNodeIsBusy/summary.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:structuredMessageFormat key="description">
<st:structuredMessageArgument>
diff --git a/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseNodeIsOffline/summary.jelly b/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseNodeIsOffline/summary.jelly
index c904371b..06b5dc4f 100644
--- a/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseNodeIsOffline/summary.jelly
+++ b/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/BecauseNodeIsOffline/summary.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:structuredMessageFormat key="description">
<st:structuredMessageArgument>
diff --git a/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/summary.jelly b/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/summary.jelly
index 08530137..9c2df0cb 100644
--- a/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/summary.jelly
+++ b/hudson-core/src/main/resources/hudson/model/queue/CauseOfBlockage/summary.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<!-- defaults to short description -->
${it.shortDescription}
diff --git a/hudson-core/src/main/resources/hudson/node_monitors/AbstractDiskSpaceMonitor/config.jelly b/hudson-core/src/main/resources/hudson/node_monitors/AbstractDiskSpaceMonitor/config.jelly
index f740c107..4dcba0a8 100644
--- a/hudson-core/src/main/resources/hudson/node_monitors/AbstractDiskSpaceMonitor/config.jelly
+++ b/hudson-core/src/main/resources/hudson/node_monitors/AbstractDiskSpaceMonitor/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:f="/lib/form">
<f:entry title="${%Free Space Threshold}" field="freeSpaceThreshold">
<f:textbox default="1GB"/>
diff --git a/hudson-core/src/main/resources/hudson/node_monitors/ArchitectureMonitor/column.jelly b/hudson-core/src/main/resources/hudson/node_monitors/ArchitectureMonitor/column.jelly
index 011affff..50afdea4 100644
--- a/hudson-core/src/main/resources/hudson/node_monitors/ArchitectureMonitor/column.jelly
+++ b/hudson-core/src/main/resources/hudson/node_monitors/ArchitectureMonitor/column.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<td align="middle">${data}</td>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/node_monitors/ClockMonitor/column.jelly b/hudson-core/src/main/resources/hudson/node_monitors/ClockMonitor/column.jelly
index a42e5c7d..b7ade569 100644
--- a/hudson-core/src/main/resources/hudson/node_monitors/ClockMonitor/column.jelly
+++ b/hudson-core/src/main/resources/hudson/node_monitors/ClockMonitor/column.jelly
@@ -15,13 +15,14 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<j:choose>
<j:when test="${data==null}">
<td align="right" data="-1">N/A</td>
</j:when>
<j:otherwise>
- <td align="right" data="${data.abs()}">${data.toHtml()}</td>
+ <td align="right" data="${data.abs()}"><j:out value="${data.toHtml()}"/></td>
</j:otherwise>
</j:choose>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/node_monitors/DiskSpaceMonitor/column.jelly b/hudson-core/src/main/resources/hudson/node_monitors/DiskSpaceMonitor/column.jelly
index 5bcb97b7..95a0917f 100644
--- a/hudson-core/src/main/resources/hudson/node_monitors/DiskSpaceMonitor/column.jelly
+++ b/hudson-core/src/main/resources/hudson/node_monitors/DiskSpaceMonitor/column.jelly
@@ -15,13 +15,14 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<j:choose>
<j:when test="${data==null}">
<td align="right" data="-1">N/A</td>
</j:when>
<j:otherwise>
- <td align="right" data="${data}">${data.toHtml()}</td>
+ <td align="right" data="${data}"><j:out value="${data.toHtml()}"/></td>
</j:otherwise>
</j:choose>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/node_monitors/DiskSpaceMonitorDescriptor/DiskSpace/cause.jelly b/hudson-core/src/main/resources/hudson/node_monitors/DiskSpaceMonitorDescriptor/DiskSpace/cause.jelly
index f0916595..e6ff49ae 100644
--- a/hudson-core/src/main/resources/hudson/node_monitors/DiskSpaceMonitorDescriptor/DiskSpace/cause.jelly
+++ b/hudson-core/src/main/resources/hudson/node_monitors/DiskSpaceMonitorDescriptor/DiskSpace/cause.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<p class="error">${%blurb(it.gbLeft)}</p>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/node_monitors/MonitorMarkedNodeOffline/message.jelly b/hudson-core/src/main/resources/hudson/node_monitors/MonitorMarkedNodeOffline/message.jelly
index 9c417397..72234212 100644
--- a/hudson-core/src/main/resources/hudson/node_monitors/MonitorMarkedNodeOffline/message.jelly
+++ b/hudson-core/src/main/resources/hudson/node_monitors/MonitorMarkedNodeOffline/message.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div class="warning">
<form method="post" action="${rootURL}/${it.url}/disable">
diff --git a/hudson-core/src/main/resources/hudson/node_monitors/ResponseTimeMonitor/Data/cause.jelly b/hudson-core/src/main/resources/hudson/node_monitors/ResponseTimeMonitor/Data/cause.jelly
index d2d5b408..83305d81 100644
--- a/hudson-core/src/main/resources/hudson/node_monitors/ResponseTimeMonitor/Data/cause.jelly
+++ b/hudson-core/src/main/resources/hudson/node_monitors/ResponseTimeMonitor/Data/cause.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<p class="error">${%Ping response time is too long or timed out.}</p>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/node_monitors/ResponseTimeMonitor/column.jelly b/hudson-core/src/main/resources/hudson/node_monitors/ResponseTimeMonitor/column.jelly
index c2d2ae5c..5dea75c4 100644
--- a/hudson-core/src/main/resources/hudson/node_monitors/ResponseTimeMonitor/column.jelly
+++ b/hudson-core/src/main/resources/hudson/node_monitors/ResponseTimeMonitor/column.jelly
@@ -15,13 +15,14 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<j:choose>
<j:when test="${data==null}">
<td align="right" data="-2">N/A</td>
</j:when>
<j:otherwise>
- <td align="right" data="${data.average()}">${data}</td>
+ <td align="right" data="${data.average()}"><j:out value="${data}"/></td>
</j:otherwise>
</j:choose>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/node_monitors/SwapSpaceMonitor/column.jelly b/hudson-core/src/main/resources/hudson/node_monitors/SwapSpaceMonitor/column.jelly
index 23b12b05..b2390de7 100644
--- a/hudson-core/src/main/resources/hudson/node_monitors/SwapSpaceMonitor/column.jelly
+++ b/hudson-core/src/main/resources/hudson/node_monitors/SwapSpaceMonitor/column.jelly
@@ -15,13 +15,14 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<j:choose>
<j:when test="${data==null}">
<td align="right" data="-1">N/A</td>
</j:when>
<j:otherwise>
- <td align="right" data="${from.toMB(data)}">${from.toHtml(data)}</td>
+ <td align="right" data="${from.toMB(data)}"><j:out value="${from.toHtml(data)}"/></td>
</j:otherwise>
</j:choose>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/node_monitors/TemporarySpaceMonitor/column.jelly b/hudson-core/src/main/resources/hudson/node_monitors/TemporarySpaceMonitor/column.jelly
index 5ca24513..f2173ee3 100644
--- a/hudson-core/src/main/resources/hudson/node_monitors/TemporarySpaceMonitor/column.jelly
+++ b/hudson-core/src/main/resources/hudson/node_monitors/TemporarySpaceMonitor/column.jelly
@@ -15,13 +15,14 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<j:choose>
<j:when test="${data==null}">
<td align="right" data="-1">N/A</td>
</j:when>
<j:otherwise>
- <td align="right" data="${data}">${data.toHtml()}</td>
+ <td align="right" data="${data}"><j:out value="${data.toHtml()}"/></td>
</j:otherwise>
</j:choose>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationCompleteNotice/message.jelly b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationCompleteNotice/message.jelly
index 88a04fdc..fbc9df8d 100644
--- a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationCompleteNotice/message.jelly
+++ b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationCompleteNotice/message.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div class="info">
<form method="post" action="${rootURL}/${it.url}/disable">
diff --git a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationFailedNotice/index.jelly b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationFailedNotice/index.jelly
index edc0e8d1..5ed01dc3 100644
--- a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationFailedNotice/index.jelly
+++ b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationFailedNotice/index.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${%ZFS Migration Problem}">
<l:main-panel>
diff --git a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationFailedNotice/message.jelly b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationFailedNotice/message.jelly
index 2c4e6c9f..862d1b80 100644
--- a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationFailedNotice/message.jelly
+++ b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/MigrationFailedNotice/message.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div class="error">
${%ZFS migration failed.}
diff --git a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/askRootPassword.jelly b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/askRootPassword.jelly
index 1ac257a2..36662abc 100644
--- a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/askRootPassword.jelly
+++ b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/askRootPassword.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="${%Permission Denied}">
<l:header />
diff --git a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/confirm.jelly b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/confirm.jelly
index eece4051..9c5d0150 100644
--- a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/confirm.jelly
+++ b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/confirm.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="${%ZFS file system creation}">
<l:header />
diff --git a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/message.jelly b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/message.jelly
index b41128c3..69d8494d 100644
--- a/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/message.jelly
+++ b/hudson-core/src/main/resources/hudson/os/solaris/ZFSInstaller/message.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div class="warning">
<form method="post" action="${rootURL}/${it.url}/act">
diff --git a/hudson-core/src/main/resources/hudson/rss20.jelly b/hudson-core/src/main/resources/hudson/rss20.jelly
index 20984cde..f4a4040a 100644
--- a/hudson-core/src/main/resources/hudson/rss20.jelly
+++ b/hudson-core/src/main/resources/hudson/rss20.jelly
@@ -14,6 +14,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson"><!-- No whitespace before xml header: -->&lt;?xml version="1.0" encoding="UTF-8"?&gt;
<st:contentType value="text/xml;charset=UTF-8" />
<j:new var="h" className="hudson.Functions" /><!-- instead of JSP functions -->
@@ -27,14 +28,14 @@
<j:forEach var="e" items="${entries}" >
<item>
- <title>${h.xmlEscape(adapter.getEntryTitle(e))}</title>
+ <title>${adapter.getEntryTitle(e)}</title>
<link>${rootURL}${h.encode(adapter.getEntryUrl(e))}</link>
<guid isPermaLink="false">${adapter.getEntryID(e)}</guid>
<pubDate>${h.rfc822Date(adapter.getEntryTimestamp(e))}</pubDate>
<author><st:out value="${adapter.getEntryAuthor(e)}"/></author>
<j:set var="desc" value="${adapter.getEntryDescription(e)}"/>
<j:if test="${desc!=null}">
- <description>${h.xmlEscape(desc)}</description>
+ <description>${desc}</description>
</j:if>
</item>
</j:forEach>
diff --git a/hudson-core/src/main/resources/hudson/scm/AbstractScmTagAction/badge.jelly b/hudson-core/src/main/resources/hudson/scm/AbstractScmTagAction/badge.jelly
index f228cb06..608d6c75 100644
--- a/hudson-core/src/main/resources/hudson/scm/AbstractScmTagAction/badge.jelly
+++ b/hudson-core/src/main/resources/hudson/scm/AbstractScmTagAction/badge.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:if test="${it.isTagged()}" xmlns:j="jelly:core">
<a href="${rootURL}/${it.build.url}tagBuild/">
<img width="16" height="16"
diff --git a/hudson-core/src/main/resources/hudson/scm/AbstractScmTagAction/inProgress.jelly b/hudson-core/src/main/resources/hudson/scm/AbstractScmTagAction/inProgress.jelly
index c3e8d6e3..a99baaa4 100644
--- a/hudson-core/src/main/resources/hudson/scm/AbstractScmTagAction/inProgress.jelly
+++ b/hudson-core/src/main/resources/hudson/scm/AbstractScmTagAction/inProgress.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true">
<st:include it="${it.build}" page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/scm/EmptyChangeLogSet/digest.jelly b/hudson-core/src/main/resources/hudson/scm/EmptyChangeLogSet/digest.jelly
index 01b3d319..55b1c7bc 100644
--- a/hudson-core/src/main/resources/hudson/scm/EmptyChangeLogSet/digest.jelly
+++ b/hudson-core/src/main/resources/hudson/scm/EmptyChangeLogSet/digest.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
${%No changes.}
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/scm/EmptyChangeLogSet/index.jelly b/hudson-core/src/main/resources/hudson/scm/EmptyChangeLogSet/index.jelly
index 271d04b8..fac20b48 100644
--- a/hudson-core/src/main/resources/hudson/scm/EmptyChangeLogSet/index.jelly
+++ b/hudson-core/src/main/resources/hudson/scm/EmptyChangeLogSet/index.jelly
@@ -18,6 +18,7 @@
<!--
Displays the CVS change log.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<h2>
<!-- just show "no changes" -->
diff --git a/hudson-core/src/main/resources/hudson/scm/NullSCM/config.jelly b/hudson-core/src/main/resources/hudson/scm/NullSCM/config.jelly
index 277998f3..a3b6a18a 100644
--- a/hudson-core/src/main/resources/hudson/scm/NullSCM/config.jelly
+++ b/hudson-core/src/main/resources/hudson/scm/NullSCM/config.jelly
@@ -16,4 +16,5 @@
<!-- nothing to configure -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" />
diff --git a/hudson-core/src/main/resources/hudson/scm/SCM/project-changes.jelly b/hudson-core/src/main/resources/hudson/scm/SCM/project-changes.jelly
index d8e2d0f8..6e041808 100644
--- a/hudson-core/src/main/resources/hudson/scm/SCM/project-changes.jelly
+++ b/hudson-core/src/main/resources/hudson/scm/SCM/project-changes.jelly
@@ -25,6 +25,7 @@
The 'builds' variable contains the collection of AbstractBuild objects
for which the change should be displayed.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:choose>
<j:when test="${empty(builds)}">
@@ -41,7 +42,7 @@
<ol>
<j:forEach var="c" items="${b.changeSet.iterator()}" varStatus="loop">
<li value="${c.revision}">
- ${c.msgAnnotated}
+ <j:out value="${c.msgAnnotated}"/>
&#8212;
diff --git a/hudson-core/src/main/resources/hudson/search/Search/search-failed.jelly b/hudson-core/src/main/resources/hudson/search/Search/search-failed.jelly
index ce49deec..22f6fecd 100644
--- a/hudson-core/src/main/resources/hudson/search/Search/search-failed.jelly
+++ b/hudson-core/src/main/resources/hudson/search/Search/search-failed.jelly
@@ -18,12 +18,13 @@
<!--
Used when the search didn't have the exact hit.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:set var="q" value="${request.getParameter('q')}"/>
<j:new var="h" className="hudson.Functions" /><!-- needed for printing title. -->
- <l:layout title="Search for '${h.escape(q)}'">
+ <l:layout title="Search for '${q}'">
<l:main-panel>
- <h1>Search for '${h.escape(q)}'</h1>
+ <h1>Search for '${q}'</h1>
<j:set var="items" value="${it.getSuggestions(request,q)}"/>
<j:choose>
<j:when test="${items.size()==0}">
diff --git a/hudson-core/src/main/resources/hudson/security/AuthorizationMatrixProperty/config.jelly b/hudson-core/src/main/resources/hudson/security/AuthorizationMatrixProperty/config.jelly
index 5e035d9a..ad342ba4 100644
--- a/hudson-core/src/main/resources/hudson/security/AuthorizationMatrixProperty/config.jelly
+++ b/hudson-core/src/main/resources/hudson/security/AuthorizationMatrixProperty/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:optionalBlock name="useProjectSecurity" title="${%Enable project-based security}" checked="${instance!=null}">
<j:set var="descriptorPath" value="descriptorByName/AuthorizationMatrixProperty" />
diff --git a/hudson-core/src/main/resources/hudson/security/FederatedLoginService/UnclaimedIdentityException/error.jelly b/hudson-core/src/main/resources/hudson/security/FederatedLoginService/UnclaimedIdentityException/error.jelly
index 8a8b2265..dbc0881a 100644
--- a/hudson-core/src/main/resources/hudson/security/FederatedLoginService/UnclaimedIdentityException/error.jelly
+++ b/hudson-core/src/main/resources/hudson/security/FederatedLoginService/UnclaimedIdentityException/error.jelly
@@ -40,6 +40,7 @@
<!--
This is used to create the first user.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:statusCode value="403" />
<l:layout title="${%loginError(it.identifier.pronoun)}">
diff --git a/hudson-core/src/main/resources/hudson/security/GlobalMatrixAuthorizationStrategy/config.jelly b/hudson-core/src/main/resources/hudson/security/GlobalMatrixAuthorizationStrategy/config.jelly
index 7cec64b4..09f4f96a 100644
--- a/hudson-core/src/main/resources/hudson/security/GlobalMatrixAuthorizationStrategy/config.jelly
+++ b/hudson-core/src/main/resources/hudson/security/GlobalMatrixAuthorizationStrategy/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:block xmlns:local="local">
<j:set var="groups" value="${descriptor.allGroups}"/>
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/Details/config.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/Details/config.jelly
index 512b459b..d5ad33ef 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/Details/config.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/Details/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:if test="${descriptor.enabled}">
<f:entry title="${%Password}:">
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/_entryForm.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/_entryForm.jelly
index 63a5a80f..52f5cd04 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/_entryForm.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/_entryForm.jelly
@@ -16,6 +16,7 @@
<!-- tag file sed by both signup.jelly and addUser.jelly -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true" title="${%Sign up}">
<l:header>
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/addUser.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/addUser.jelly
index 74255f2d..3c4fd0b4 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/addUser.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/addUser.jelly
@@ -18,6 +18,7 @@
<!--
Page for admin to create a new user
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<local:_entryForm host="${it}" title="${%Create User}" action="createAccountByAdmin" captcha="${false}" xmlns:local="/hudson/security/HudsonPrivateSecurityRealm" />
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/config.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/config.jelly
index e0c8e8e5..ab2cc20a 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/config.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="" help="/help/security/private-realm/allow-signup.html">
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/delete.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/delete.jelly
index e6a7b18c..4b535de2 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/delete.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/delete.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<script src="${resURL}/scripts/popup-dialog.js" type="text/javascript"/>
@@ -31,4 +32,4 @@
</form>
</div>
</div>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/firstUser.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/firstUser.jelly
index 536219ff..eea2e418 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/firstUser.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/firstUser.jelly
@@ -18,6 +18,7 @@
<!--
This is used to create the first user.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<local:_entryForm host="${it}" title="${%Create First Admin User}" action="createFirstAccount" captcha="${false}" xmlns:local="/hudson/security/HudsonPrivateSecurityRealm" />
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/index.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/index.jelly
index 70d6a8bf..17aed662 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/index.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout permission="${app.ADMINISTER}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/loginLink.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/loginLink.jelly
index 86d1212c..664a016a 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/loginLink.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/loginLink.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout">
<st:include page="/hudson/security/SecurityRealm/loginLink.jelly" />
<j:if test="${it.allowsSignup()}">
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/sidepanel.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/sidepanel.jelly
index 53734a2e..1e8b4caa 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/sidepanel.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<l:header />
<l:side-panel>
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/signup.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/signup.jelly
index 5146d6e8..502307dd 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/signup.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/signup.jelly
@@ -18,6 +18,7 @@
<!--
User self sign up page.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<local:_entryForm host="${app}" title="${%Sign up}" action="createAccount" captcha="${it.isEnableCaptcha()}" xmlns:local="/hudson/security/HudsonPrivateSecurityRealm" />
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/signupWithFederatedIdentity.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/signupWithFederatedIdentity.jelly
index 53009973..c25f352e 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/signupWithFederatedIdentity.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/signupWithFederatedIdentity.jelly
@@ -39,6 +39,7 @@
<!--
User self sign up page.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<local:_entryForm host="${app}" title="${%Sign up}" action="createAccountWithFederatedIdentity" captcha="${true}" xmlns:local="/hudson/security/HudsonPrivateSecurityRealm" />
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/success.jelly b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/success.jelly
index 7357afcb..f6811325 100644
--- a/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/success.jelly
+++ b/hudson-core/src/main/resources/hudson/security/HudsonPrivateSecurityRealm/success.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true">
<l:hasPermission permission="${app.READ}" it="${app}">
diff --git a/hudson-core/src/main/resources/hudson/security/LDAPSecurityRealm/config.jelly b/hudson-core/src/main/resources/hudson/security/LDAPSecurityRealm/config.jelly
index 11d0e8e6..e57c1095 100644
--- a/hudson-core/src/main/resources/hudson/security/LDAPSecurityRealm/config.jelly
+++ b/hudson-core/src/main/resources/hudson/security/LDAPSecurityRealm/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Server}" help="/help/security/ldap/server.html">
<f:textbox name="ldap.server" value="${instance.server}"
diff --git a/hudson-core/src/main/resources/hudson/security/PAMSecurityRealm/config.jelly b/hudson-core/src/main/resources/hudson/security/PAMSecurityRealm/config.jelly
index 3b130d2f..8c9fac48 100644
--- a/hudson-core/src/main/resources/hudson/security/PAMSecurityRealm/config.jelly
+++ b/hudson-core/src/main/resources/hudson/security/PAMSecurityRealm/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:advanced>
<f:entry title="${%Service Name}">
diff --git a/hudson-core/src/main/resources/hudson/security/SecurityRealm/loginDialog.jelly b/hudson-core/src/main/resources/hudson/security/SecurityRealm/loginDialog.jelly
index eef2528c..71f85422 100644
--- a/hudson-core/src/main/resources/hudson/security/SecurityRealm/loginDialog.jelly
+++ b/hudson-core/src/main/resources/hudson/security/SecurityRealm/loginDialog.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<style type="text/css">
#loginForm input {
diff --git a/hudson-core/src/main/resources/hudson/security/SecurityRealm/loginLink.jelly b/hudson-core/src/main/resources/hudson/security/SecurityRealm/loginLink.jelly
index 206efa23..8adf3c4a 100644
--- a/hudson-core/src/main/resources/hudson/security/SecurityRealm/loginLink.jelly
+++ b/hudson-core/src/main/resources/hudson/security/SecurityRealm/loginLink.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler">
<j:invokeStatic var="fromEncoded" className="java.net.URLEncoder" method="encode">
diff --git a/hudson-core/src/main/resources/hudson/security/csrf/DefaultCrumbIssuer/config.jelly b/hudson-core/src/main/resources/hudson/security/csrf/DefaultCrumbIssuer/config.jelly
index 7c96a109..27c1570c 100644
--- a/hudson-core/src/main/resources/hudson/security/csrf/DefaultCrumbIssuer/config.jelly
+++ b/hudson-core/src/main/resources/hudson/security/csrf/DefaultCrumbIssuer/config.jelly
@@ -12,6 +12,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="" field="excludeClientIPFromCrumb">
<f:checkbox checked="${instance.isExcludeClientIPFromCrumb()}" title="${%Enable proxy compatibility}" />
diff --git a/hudson-core/src/main/resources/hudson/slaves/CommandConnector/config.jelly b/hudson-core/src/main/resources/hudson/slaves/CommandConnector/config.jelly
index 168bfe67..4f4bdbef 100644
--- a/hudson-core/src/main/resources/hudson/slaves/CommandConnector/config.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/CommandConnector/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Launch command}" field="command">
<f:textbox />
diff --git a/hudson-core/src/main/resources/hudson/slaves/CommandLauncher/config.jelly b/hudson-core/src/main/resources/hudson/slaves/CommandLauncher/config.jelly
index 168bfe67..4f4bdbef 100644
--- a/hudson-core/src/main/resources/hudson/slaves/CommandLauncher/config.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/CommandLauncher/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Launch command}" field="command">
<f:textbox />
diff --git a/hudson-core/src/main/resources/hudson/slaves/CommandLauncher/help.jelly b/hudson-core/src/main/resources/hudson/slaves/CommandLauncher/help.jelly
index 51c1eb2d..dfcefc1c 100644
--- a/hudson-core/src/main/resources/hudson/slaves/CommandLauncher/help.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/CommandLauncher/help.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
${%blurb}
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/slaves/ComputerLauncher/main.jelly b/hudson-core/src/main/resources/hudson/slaves/ComputerLauncher/main.jelly
index b55c67a0..3eb75add 100644
--- a/hudson-core/src/main/resources/hudson/slaves/ComputerLauncher/main.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/ComputerLauncher/main.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:if test="${it.launchSupported and it.offline and !it.temporarilyOffline}">
<j:choose>
diff --git a/hudson-core/src/main/resources/hudson/slaves/ComputerLauncherFilter/main.jelly b/hudson-core/src/main/resources/hudson/slaves/ComputerLauncherFilter/main.jelly
index 10241dde..a6cfb930 100644
--- a/hudson-core/src/main/resources/hudson/slaves/ComputerLauncherFilter/main.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/ComputerLauncherFilter/main.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:include it="${it.core}" page="main.jelly" />
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/slaves/DelegatingComputerLauncher/config.jelly b/hudson-core/src/main/resources/hudson/slaves/DelegatingComputerLauncher/config.jelly
index 84f3d70f..5ac3fe3c 100644
--- a/hudson-core/src/main/resources/hudson/slaves/DelegatingComputerLauncher/config.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/DelegatingComputerLauncher/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
diff --git a/hudson-core/src/main/resources/hudson/slaves/DumbSlave/configure-entries.jelly b/hudson-core/src/main/resources/hudson/slaves/DumbSlave/configure-entries.jelly
index 68ac41a3..ce046f78 100644
--- a/hudson-core/src/main/resources/hudson/slaves/DumbSlave/configure-entries.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/DumbSlave/configure-entries.jelly
@@ -18,6 +18,7 @@
<!--
Config page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Description}" help="/help/system-config/master-slave/description.html">
diff --git a/hudson-core/src/main/resources/hudson/slaves/DumbSlave/newInstanceDetail.jelly b/hudson-core/src/main/resources/hudson/slaves/DumbSlave/newInstanceDetail.jelly
index 9b269d8b..24ff82b3 100644
--- a/hudson-core/src/main/resources/hudson/slaves/DumbSlave/newInstanceDetail.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/DumbSlave/newInstanceDetail.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div>
${%detail}
</div>
diff --git a/hudson-core/src/main/resources/hudson/slaves/EnvironmentVariablesNodeProperty/config.jelly b/hudson-core/src/main/resources/hudson/slaves/EnvironmentVariablesNodeProperty/config.jelly
index 70b3f0e2..93fb1244 100644
--- a/hudson-core/src/main/resources/hudson/slaves/EnvironmentVariablesNodeProperty/config.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/EnvironmentVariablesNodeProperty/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%List of key-value pairs}" help="${descriptor.getHelpPage()}">
diff --git a/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/config.jelly b/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/config.jelly
index 1fc92312..aea33225 100644
--- a/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/config.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:advanced>
<f:entry title="${%Tunnel connection through}" help="/help/system-config/master-slave/jnlp-tunnel.html">
diff --git a/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/help.jelly b/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/help.jelly
index 51c1eb2d..dfcefc1c 100644
--- a/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/help.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/help.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
${%blurb}
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/main.jelly b/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/main.jelly
index bcd6fd87..178a123c 100644
--- a/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/main.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/JNLPLauncher/main.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:choose>
<j:when test="${app.slaveAgentPort==-1}">
diff --git a/hudson-core/src/main/resources/hudson/slaves/OfflineCause/ChannelTermination/cause.jelly b/hudson-core/src/main/resources/hudson/slaves/OfflineCause/ChannelTermination/cause.jelly
index d39c2b9c..79178fe1 100644
--- a/hudson-core/src/main/resources/hudson/slaves/OfflineCause/ChannelTermination/cause.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/OfflineCause/ChannelTermination/cause.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<p class="error">${%Connection was broken}</p>
<pre>${h.printThrowable(it.cause)}</pre>
diff --git a/hudson-core/src/main/resources/hudson/slaves/OfflineCause/LaunchFailed/cause.jelly b/hudson-core/src/main/resources/hudson/slaves/OfflineCause/LaunchFailed/cause.jelly
index f66f0dcd..2b82ce64 100644
--- a/hudson-core/src/main/resources/hudson/slaves/OfflineCause/LaunchFailed/cause.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/OfflineCause/LaunchFailed/cause.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<p class="error">${it} <a href="log">${%See log for more details}</a></p>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/slaves/OfflineCause/cause.jelly b/hudson-core/src/main/resources/hudson/slaves/OfflineCause/cause.jelly
index 7815e883..73d521fa 100644
--- a/hudson-core/src/main/resources/hudson/slaves/OfflineCause/cause.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/OfflineCause/cause.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
- <p class="warning">${it}</p>
+ <p class="warning"><j:out value="${it}" /></p>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/Demand/config.jelly b/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/Demand/config.jelly
index 7cfdf970..f8933d94 100644
--- a/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/Demand/config.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/Demand/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%In demand delay}" help="/help/system-config/master-slave/demand/inDemandDelay.html">
diff --git a/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/Scheduled/config.jelly b/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/Scheduled/config.jelly
index 66cfd198..90f6f42a 100644
--- a/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/Scheduled/config.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/Scheduled/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Startup Schedule}" help="/descriptor/hudson.triggers.TimerTrigger/help/spec">
diff --git a/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/config.jelly b/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/config.jelly
index e2efc9c1..5c272c9c 100644
--- a/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/config.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/RetentionStrategy/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/slaves/SimpleScheduledRetentionStrategy/config.jelly b/hudson-core/src/main/resources/hudson/slaves/SimpleScheduledRetentionStrategy/config.jelly
index fcaf35cf..95fdd50c 100644
--- a/hudson-core/src/main/resources/hudson/slaves/SimpleScheduledRetentionStrategy/config.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/SimpleScheduledRetentionStrategy/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Startup Schedule}" help="/descriptor/hudson.triggers.TimerTrigger/help/spec">
diff --git a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/disconnect.jelly b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/disconnect.jelly
index facae9bb..3cb69b5d 100644
--- a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/disconnect.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/disconnect.jelly
@@ -16,6 +16,7 @@
<!-- Disconnect confirmation -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName} ${%disconnect}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/log.jelly b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/log.jelly
index 667428bf..a123186e 100644
--- a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/log.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/log.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.displayName} log" secured="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/sidepanel2.jelly b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/sidepanel2.jelly
index a32ca690..8b63ead0 100644
--- a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/sidepanel2.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/sidepanel2.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:isAdmin>
<l:task icon="images/24x24/clipboard.png" href="log" title="${%Log}" />
diff --git a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/slave-agent.jnlp.jelly b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/slave-agent.jnlp.jelly
index 29bd2440..6f87760a 100644
--- a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/slave-agent.jnlp.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/slave-agent.jnlp.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson">
<st:contentType value="application/x-java-jnlp-file" />
<j:new var="h" className="hudson.Functions" />
diff --git a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/systemInfo.jelly b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/systemInfo.jelly
index 4a7fa52f..7384b8f7 100644
--- a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/systemInfo.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/systemInfo.jelly
@@ -20,6 +20,7 @@
TODO: merge this with Hudson/systemInfo.jelly
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="${it.displayName} ${%System Information}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/threadDump.jelly b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/threadDump.jelly
index 55f2056f..d81fd896 100644
--- a/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/threadDump.jelly
+++ b/hudson-core/src/main/resources/hudson/slaves/SlaveComputer/threadDump.jelly
@@ -20,6 +20,7 @@
TODO: merge this with Hudson/threadDump.jelly
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="${%title(it.displayName)}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/tasks/Ant/AntInstallation/config.jelly b/hudson-core/src/main/resources/hudson/tasks/Ant/AntInstallation/config.jelly
index ea7b6665..bca494ad 100644
--- a/hudson-core/src/main/resources/hudson/tasks/Ant/AntInstallation/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/Ant/AntInstallation/config.jelly
@@ -18,6 +18,7 @@
<!--
Config page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Name}" field="name">
<f:textbox />
diff --git a/hudson-core/src/main/resources/hudson/tasks/Ant/config.jelly b/hudson-core/src/main/resources/hudson/tasks/Ant/config.jelly
index f36ae829..c1bcda46 100644
--- a/hudson-core/src/main/resources/hudson/tasks/Ant/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/Ant/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:if test="${!empty(descriptor.installations)}">
<f:entry title="${%Ant Version}">
diff --git a/hudson-core/src/main/resources/hudson/tasks/ArtifactArchiver/config.jelly b/hudson-core/src/main/resources/hudson/tasks/ArtifactArchiver/config.jelly
index 56f8413e..69dde0c6 100644
--- a/hudson-core/src/main/resources/hudson/tasks/ArtifactArchiver/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/ArtifactArchiver/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Files to archive}" field="artifacts">
diff --git a/hudson-core/src/main/resources/hudson/tasks/BatchFile/config.jelly b/hudson-core/src/main/resources/hudson/tasks/BatchFile/config.jelly
index 1301f34e..cd454767 100644
--- a/hudson-core/src/main/resources/hudson/tasks/BatchFile/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/BatchFile/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Command}"
description="${%description(rootURL)}">
diff --git a/hudson-core/src/main/resources/hudson/tasks/BuildTrigger/config.jelly b/hudson-core/src/main/resources/hudson/tasks/BuildTrigger/config.jelly
index 88b0a033..9f92c1f7 100644
--- a/hudson-core/src/main/resources/hudson/tasks/BuildTrigger/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/BuildTrigger/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Projects to build}">
<f:textbox name="buildTrigger.childProjects" value="${instance.childProjectsValue}"
diff --git a/hudson-core/src/main/resources/hudson/tasks/Fingerprinter/FingerprintAction/index.jelly b/hudson-core/src/main/resources/hudson/tasks/Fingerprinter/FingerprintAction/index.jelly
index e4e5097c..690cf527 100644
--- a/hudson-core/src/main/resources/hudson/tasks/Fingerprinter/FingerprintAction/index.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/Fingerprinter/FingerprintAction/index.jelly
@@ -20,6 +20,7 @@
This belongs to a build view.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout>
<st:include it="${it.build}" page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/tasks/JavadocArchiver/config.jelly b/hudson-core/src/main/resources/hudson/tasks/JavadocArchiver/config.jelly
index 31c57850..fc6fd27c 100644
--- a/hudson-core/src/main/resources/hudson/tasks/JavadocArchiver/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/JavadocArchiver/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Javadoc directory}"
description="${%description}">
diff --git a/hudson-core/src/main/resources/hudson/tasks/LogRotator/config.jelly b/hudson-core/src/main/resources/hudson/tasks/LogRotator/config.jelly
index e95ab318..d4d48935 100644
--- a/hudson-core/src/main/resources/hudson/tasks/LogRotator/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/LogRotator/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Days to keep builds}"
description="${%if not empty, build records are only kept up to this number of days}"
@@ -41,4 +42,4 @@
name="logrotate_artifact_nums" value="${logRotator.artifactNumToKeepStr}" />
</f:entry>
</f:advanced>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/tasks/Mailer/UserProperty/config.jelly b/hudson-core/src/main/resources/hudson/tasks/Mailer/UserProperty/config.jelly
index 0ec20af8..1515ee7c 100644
--- a/hudson-core/src/main/resources/hudson/tasks/Mailer/UserProperty/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/Mailer/UserProperty/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%E-mail address}"
description="${%description}">
diff --git a/hudson-core/src/main/resources/hudson/tasks/Mailer/config.jelly b/hudson-core/src/main/resources/hudson/tasks/Mailer/config.jelly
index 01943921..14e63555 100644
--- a/hudson-core/src/main/resources/hudson/tasks/Mailer/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/Mailer/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Recipients}" description="${%description}">
<f:textbox name="mailer_recipients" value="${instance.recipients}"/>
diff --git a/hudson-core/src/main/resources/hudson/tasks/Mailer/global.jelly b/hudson-core/src/main/resources/hudson/tasks/Mailer/global.jelly
index 87a599b9..045131e5 100644
--- a/hudson-core/src/main/resources/hudson/tasks/Mailer/global.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/Mailer/global.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:section title="${%E-mail Notification}">
<f:entry title="${%SMTP server}" field="smtpServer">
diff --git a/hudson-core/src/main/resources/hudson/tasks/Maven/MavenInstallation/config.jelly b/hudson-core/src/main/resources/hudson/tasks/Maven/MavenInstallation/config.jelly
index 3d78e99c..0f6b219b 100644
--- a/hudson-core/src/main/resources/hudson/tasks/Maven/MavenInstallation/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/Maven/MavenInstallation/config.jelly
@@ -18,6 +18,7 @@
<!--
Config page
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Name}" field="name">
<f:textbox />
diff --git a/hudson-core/src/main/resources/hudson/tasks/Maven/config.jelly b/hudson-core/src/main/resources/hudson/tasks/Maven/config.jelly
index caef0470..ac46aee8 100644
--- a/hudson-core/src/main/resources/hudson/tasks/Maven/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/Maven/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:if test="${!empty(descriptor.installations)}">
<f:entry title="${%Maven Version}">
diff --git a/hudson-core/src/main/resources/hudson/tasks/Shell/config.jelly b/hudson-core/src/main/resources/hudson/tasks/Shell/config.jelly
index 73d71cf8..9670ca01 100644
--- a/hudson-core/src/main/resources/hudson/tasks/Shell/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/Shell/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Command}" description="${%description(rootURL)}">
<f:textarea name="command" value="${instance.command}" class="fixed-width" />
diff --git a/hudson-core/src/main/resources/hudson/tasks/Shell/global.jelly b/hudson-core/src/main/resources/hudson/tasks/Shell/global.jelly
index d6ce4611..77171fe5 100644
--- a/hudson-core/src/main/resources/hudson/tasks/Shell/global.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/Shell/global.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:section title="${%Shell}">
<f:entry title="${%Shell executable}" help="/help/shell/shellexe.html">
diff --git a/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/index.jelly b/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/index.jelly
index 42f21c52..f12ba8d0 100644
--- a/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/index.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="${it.owner} test - ${it.displayName}">
@@ -62,22 +63,22 @@
<j:if test="${!empty(it.errorDetails)}">
<h3>${%Error Message}</h3>
- <pre>${it.annotate(it.errorDetails)}</pre>
+ <pre><j:out value="${it.annotate(it.errorDetails)}"/></pre>
</j:if>
<j:if test="${!empty(it.errorStackTrace)}">
<h3>${%Stacktrace}</h3>
- <pre>${it.annotate(it.errorStackTrace)}</pre>
+ <pre><j:out value="${it.annotate(it.errorStackTrace)}"/></pre>
</j:if>
<j:if test="${!empty(it.stdout)}">
<h3>${%Standard Output}</h3>
- <pre>${it.annotate(it.stdout)}</pre>
+ <pre><j:out value="${it.annotate(it.stdout)}"/></pre>
</j:if>
<j:if test="${!empty(it.stderr)}">
<h3>${%Standard Error}</h3>
- <pre>${it.annotate(it.stderr)}</pre>
+ <pre><j:out value="${it.annotate(it.stderr)}"/></pre>
</j:if>
</l:main-panel>
</l:layout>
diff --git a/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/list.jelly b/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/list.jelly
index 7a3b5d4f..32f25727 100644
--- a/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/list.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/list.jelly
@@ -18,6 +18,7 @@
<!--
Trend of test execution over time.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<table class="pane sortable" id="testresult">
@@ -39,7 +40,7 @@
<st:include it="${badge}" page="badge.jelly" optional="true"/>
</j:forEach>
</td>
- <td class="pane" style="text-align:left">${test.description}</td>
+ <td class="pane" style="text-align:left"><j:out value="${test.description}"/></td>
<td class="pane" style="text-align:left" data="${test.duration}">${test.durationString}</td>
<td class="pane">
<j:set var="pst" value="${test.status}" />
diff --git a/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/summary.jelly b/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/summary.jelly
index 404ccc85..e6f6f484 100644
--- a/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/summary.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/junit/CaseResult/summary.jelly
@@ -16,6 +16,7 @@
<!-- this is loaded on demand in the failed test results summary -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:contentType value="text/plain"/>
@@ -27,7 +28,7 @@
<j:otherwise>
<j:if test="${it.errorStackTrace!=null}">
<h3>${%Stack Trace}</h3>
- <pre><st:out value="${it.errorStackTrace}"/></pre>
+ <pre><j:out value="${it.annotate(it.errorStackTrace)}"/></pre>
</j:if>
</j:otherwise>
</j:choose>
diff --git a/hudson-core/src/main/resources/hudson/tasks/junit/ClassResult/body.jelly b/hudson-core/src/main/resources/hudson/tasks/junit/ClassResult/body.jelly
index c97f6b96..5736643a 100644
--- a/hudson-core/src/main/resources/hudson/tasks/junit/ClassResult/body.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/junit/ClassResult/body.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:if test="${it.totalCount!=0}">
<h2>${%All Tests}</h2>
diff --git a/hudson-core/src/main/resources/hudson/tasks/junit/ClassResult/list.jelly b/hudson-core/src/main/resources/hudson/tasks/junit/ClassResult/list.jelly
index 801f79df..95b71fe7 100644
--- a/hudson-core/src/main/resources/hudson/tasks/junit/ClassResult/list.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/junit/ClassResult/list.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<table class="pane sortable" id="testresult">
@@ -38,7 +39,7 @@
<st:include it="${badge}" page="badge.jelly" optional="true"/>
</j:forEach>
</td>
- <td class="pane" style="text-align:right">${p.description}</td>
+ <td class="pane" style="text-align:right"><j:out value="${p.description}"/></td>
<td class="pane" style="text-align:right" data="${p.duration}">${p.durationString}</td>
<td class="pane" style="text-align:right">${p.failCount}</td>
<td class="pane" style="text-align:right">${p.skipCount}</td>
diff --git a/hudson-core/src/main/resources/hudson/tasks/junit/History/index.jelly b/hudson-core/src/main/resources/hudson/tasks/junit/History/index.jelly
index e6ac20b9..4968729f 100644
--- a/hudson-core/src/main/resources/hudson/tasks/junit/History/index.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/junit/History/index.jelly
@@ -16,6 +16,7 @@
<!-- Displays the chart that show how long builds are taking -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${%title(it.testObject.displayName)}">
<j:set var="start" value="${request.getParameter('start')?:0}"/>
diff --git a/hudson-core/src/main/resources/hudson/tasks/junit/JUnitResultArchiver/config.jelly b/hudson-core/src/main/resources/hudson/tasks/junit/JUnitResultArchiver/config.jelly
index 8792c1e3..147553be 100644
--- a/hudson-core/src/main/resources/hudson/tasks/junit/JUnitResultArchiver/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/junit/JUnitResultArchiver/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Test report XMLs}" field="testResults"
diff --git a/hudson-core/src/main/resources/hudson/tasks/test/AbstractTestResultAction/summary.jelly b/hudson-core/src/main/resources/hudson/tasks/test/AbstractTestResultAction/summary.jelly
index 5e1464c1..8b87edfd 100644
--- a/hudson-core/src/main/resources/hudson/tasks/test/AbstractTestResultAction/summary.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/test/AbstractTestResultAction/summary.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<script type="text/javascript">
diff --git a/hudson-core/src/main/resources/hudson/tasks/test/AggregatedTestResultPublisher/TestResultAction/index.jelly b/hudson-core/src/main/resources/hudson/tasks/test/AggregatedTestResultPublisher/TestResultAction/index.jelly
index 5b542148..f3acb1ba 100644
--- a/hudson-core/src/main/resources/hudson/tasks/test/AggregatedTestResultPublisher/TestResultAction/index.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/test/AggregatedTestResultPublisher/TestResultAction/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt" xmlns:local="local" xmlns:test="/lib/test">
<l:layout title="Test">
<st:include page="sidepanel.jelly" it="${it.owner}"/>
diff --git a/hudson-core/src/main/resources/hudson/tasks/test/AggregatedTestResultPublisher/config.jelly b/hudson-core/src/main/resources/hudson/tasks/test/AggregatedTestResultPublisher/config.jelly
index 71f617ad..747ecde1 100644
--- a/hudson-core/src/main/resources/hudson/tasks/test/AggregatedTestResultPublisher/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/test/AggregatedTestResultPublisher/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:nested>
<table style="width:100%">
diff --git a/hudson-core/src/main/resources/hudson/tasks/test/MatrixTestResult/index.jelly b/hudson-core/src/main/resources/hudson/tasks/test/MatrixTestResult/index.jelly
index fb4cdf3c..d906f849 100644
--- a/hudson-core/src/main/resources/hudson/tasks/test/MatrixTestResult/index.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/test/MatrixTestResult/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt" xmlns:local="local" xmlns:test="/lib/test">
<l:layout title="Test">
<st:include page="sidepanel.jelly" it="${it.owner}"/>
diff --git a/hudson-core/src/main/resources/hudson/tasks/test/MetaTabulatedResult/body.jelly b/hudson-core/src/main/resources/hudson/tasks/test/MetaTabulatedResult/body.jelly
index 677049b9..4a5c1ae9 100644
--- a/hudson-core/src/main/resources/hudson/tasks/test/MetaTabulatedResult/body.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/test/MetaTabulatedResult/body.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<script type="text/javascript">
diff --git a/hudson-core/src/main/resources/hudson/tasks/test/MetaTabulatedResult/list.jelly b/hudson-core/src/main/resources/hudson/tasks/test/MetaTabulatedResult/list.jelly
index acabd150..e80acb34 100644
--- a/hudson-core/src/main/resources/hudson/tasks/test/MetaTabulatedResult/list.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/test/MetaTabulatedResult/list.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<table class="pane sortable" id="testresult">
@@ -38,7 +39,7 @@
<st:include it="${badge}" page="badge.jelly" optional="true"/>
</j:forEach>
</td>
- <td class="pane" style="text-align:right">${p.description}</td>
+ <td class="pane" style="text-align:right"><j:out value="${p.description}"/></td>
<td class="pane" style="text-align:right" data="${p.duration}">${p.durationString}</td>
<td class="pane" style="text-align:right">${p.failCount}</td>
<td class="pane" style="text-align:right">${p.skipCount}</td>
diff --git a/hudson-core/src/main/resources/hudson/tasks/test/TestObject/sidepanel.jelly b/hudson-core/src/main/resources/hudson/tasks/test/TestObject/sidepanel.jelly
index 041114e8..7310851a 100644
--- a/hudson-core/src/main/resources/hudson/tasks/test/TestObject/sidepanel.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/test/TestObject/sidepanel.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for the build view.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:header />
<l:side-panel>
diff --git a/hudson-core/src/main/resources/hudson/tasks/test/TestResult/index.jelly b/hudson-core/src/main/resources/hudson/tasks/test/TestResult/index.jelly
index bc81497a..7bb8e245 100644
--- a/hudson-core/src/main/resources/hudson/tasks/test/TestResult/index.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/test/TestResult/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:test="/lib/test">
<l:layout title="${it.owner} ${it.displayName}">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/tasks/test/TestResultProjectAction/floatingBox.jelly b/hudson-core/src/main/resources/hudson/tasks/test/TestResultProjectAction/floatingBox.jelly
index 4f61fc65..92277fa0 100644
--- a/hudson-core/src/main/resources/hudson/tasks/test/TestResultProjectAction/floatingBox.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/test/TestResultProjectAction/floatingBox.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt" xmlns:local="local">
<j:set var="tr" value="${action.lastTestResultAction}" />
<j:if test="${tr.previousResult!=null}">
diff --git a/hudson-core/src/main/resources/hudson/tasks/test/TestResultProjectAction/index.jelly b/hudson-core/src/main/resources/hudson/tasks/test/TestResultProjectAction/index.jelly
index ea0b5742..60175658 100644
--- a/hudson-core/src/main/resources/hudson/tasks/test/TestResultProjectAction/index.jelly
+++ b/hudson-core/src/main/resources/hudson/tasks/test/TestResultProjectAction/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt" xmlns:local="local">
<l:layout title="Test">
<st:include page="sidepanel.jelly" it="${it.project}" />
diff --git a/hudson-core/src/main/resources/hudson/tools/CommandInstaller/config.jelly b/hudson-core/src/main/resources/hudson/tools/CommandInstaller/config.jelly
index cd9fa24b..389f0bb3 100644
--- a/hudson-core/src/main/resources/hudson/tools/CommandInstaller/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tools/CommandInstaller/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:f="/lib/form" xmlns:st="jelly:stapler" xmlns:t="/hudson/tools">
<t:label />
<f:entry title="${%Command}" field="command">
diff --git a/hudson-core/src/main/resources/hudson/tools/DownloadFromUrlInstaller/config.jelly b/hudson-core/src/main/resources/hudson/tools/DownloadFromUrlInstaller/config.jelly
index 2ff6bfb9..8ee1f9fa 100644
--- a/hudson-core/src/main/resources/hudson/tools/DownloadFromUrlInstaller/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tools/DownloadFromUrlInstaller/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:f="/lib/form">
<f:entry title="${%Version}" field="id">
<j:choose>
diff --git a/hudson-core/src/main/resources/hudson/tools/InstallSourceProperty/config.jelly b/hudson-core/src/main/resources/hudson/tools/InstallSourceProperty/config.jelly
index df2e7339..776e3a80 100644
--- a/hudson-core/src/main/resources/hudson/tools/InstallSourceProperty/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tools/InstallSourceProperty/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:f="/lib/form">
<f:block>
<j:invokeStatic var="descriptors" className="hudson.tools.ToolInstallerDescriptor" method="for_">
diff --git a/hudson-core/src/main/resources/hudson/tools/JDKInstaller/config.jelly b/hudson-core/src/main/resources/hudson/tools/JDKInstaller/config.jelly
index b4a917e6..3b2e2430 100644
--- a/hudson-core/src/main/resources/hudson/tools/JDKInstaller/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tools/JDKInstaller/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:f="/lib/form">
<!-- XXX t:label? -->
<f:entry title="${%Version}" field="id">
diff --git a/hudson-core/src/main/resources/hudson/tools/ToolInstallation/config.jelly b/hudson-core/src/main/resources/hudson/tools/ToolInstallation/config.jelly
index 94f6ecee..1871f3a6 100644
--- a/hudson-core/src/main/resources/hudson/tools/ToolInstallation/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tools/ToolInstallation/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Per ToolInstallation configuration page added to the system configuration.
diff --git a/hudson-core/src/main/resources/hudson/tools/ToolInstallation/global.jelly b/hudson-core/src/main/resources/hudson/tools/ToolInstallation/global.jelly
index 219dca6e..b52be4bb 100644
--- a/hudson-core/src/main/resources/hudson/tools/ToolInstallation/global.jelly
+++ b/hudson-core/src/main/resources/hudson/tools/ToolInstallation/global.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:section title="${descriptor.displayName}">
<f:entry title="${%title(descriptor.displayName)}" description="${%description(descriptor.displayName)}">
@@ -43,4 +44,4 @@
</f:repeatable>
</f:entry>
</f:section>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/tools/ToolLocationNodeProperty/config.jelly b/hudson-core/src/main/resources/hudson/tools/ToolLocationNodeProperty/config.jelly
index ff86eee4..37a3fab6 100644
--- a/hudson-core/src/main/resources/hudson/tools/ToolLocationNodeProperty/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tools/ToolLocationNodeProperty/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%List of tool locations}" help="/help/tools/tool-location-node-property.html">
diff --git a/hudson-core/src/main/resources/hudson/tools/ZipExtractionInstaller/config.jelly b/hudson-core/src/main/resources/hudson/tools/ZipExtractionInstaller/config.jelly
index e30147d2..96650e6e 100644
--- a/hudson-core/src/main/resources/hudson/tools/ZipExtractionInstaller/config.jelly
+++ b/hudson-core/src/main/resources/hudson/tools/ZipExtractionInstaller/config.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:f="/lib/form" xmlns:st="jelly:stapler" xmlns:t="/hudson/tools">
<t:label />
<f:entry title="${%Download URL for binary archive}" field="url">
diff --git a/hudson-core/src/main/resources/hudson/tools/label.jelly b/hudson-core/src/main/resources/hudson/tools/label.jelly
index 5732a55a..0b9471d6 100644
--- a/hudson-core/src/main/resources/hudson/tools/label.jelly
+++ b/hudson-core/src/main/resources/hudson/tools/label.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:f="/lib/form" xmlns:st="jelly:stapler">
<st:documentation>
Puts the input field for allowing an user to limit this installer to a certain label.
diff --git a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/AdministrativeMonitorImpl/message.jelly b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/AdministrativeMonitorImpl/message.jelly
index 1ec10e8e..328a755e 100644
--- a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/AdministrativeMonitorImpl/message.jelly
+++ b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/AdministrativeMonitorImpl/message.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<div class='warning'>
${%blurb}
</div>
diff --git a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/BuildAction/index.jelly b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/BuildAction/index.jelly
index d421b36d..8f2ef141 100644
--- a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/BuildAction/index.jelly
+++ b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/BuildAction/index.jelly
@@ -18,6 +18,7 @@
<!--
Displays the polling log output
-->
+<?jelly escape-by-default='true'?>
<st:compress xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.build.parent.displayName} #${it.build.number} ${%Polling Log}" norefresh="true">
<st:include it="${it.build}" page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/DescriptorImpl/index.jelly b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/DescriptorImpl/index.jelly
index c92373ab..5385732e 100644
--- a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/DescriptorImpl/index.jelly
+++ b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/DescriptorImpl/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout title="${%Current SCM Polling Activities}">
<st:include it="${app}" page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/SCMAction/index.jelly b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/SCMAction/index.jelly
index 7c6bb392..ce6eb879 100644
--- a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/SCMAction/index.jelly
+++ b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/SCMAction/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout>
<st:include it="${it.owner}" page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/SCMTriggerCause/description.jelly b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/SCMTriggerCause/description.jelly
index 6eb8bd0c..b0cd236d 100644
--- a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/SCMTriggerCause/description.jelly
+++ b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/SCMTriggerCause/description.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<span><a href="pollingLog">${it.shortDescription}</a></span>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/config.jelly b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/config.jelly
index cdce39d6..ec3a88d4 100644
--- a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/config.jelly
+++ b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="instanceProperty" value="${cu.getTriggerProjectProperty(it, descriptor.jsonSafeClassName)}"/>
<j:set var="instance" value="${instanceProperty.getValue()}"/>
diff --git a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/global.jelly b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/global.jelly
index 814df1b5..7fd43e99 100644
--- a/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/global.jelly
+++ b/hudson-core/src/main/resources/hudson/triggers/SCMTrigger/global.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:if test="${app.items.size()>10}">
<!--
diff --git a/hudson-core/src/main/resources/hudson/triggers/TimerTrigger/config.jelly b/hudson-core/src/main/resources/hudson/triggers/TimerTrigger/config.jelly
index c61a0549..13ef0360 100644
--- a/hudson-core/src/main/resources/hudson/triggers/TimerTrigger/config.jelly
+++ b/hudson-core/src/main/resources/hudson/triggers/TimerTrigger/config.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="instanceProperty" value="${cu.getTriggerProjectProperty(it, descriptor.jsonSafeClassName)}"/>
<j:set var="instance" value="${instanceProperty.getValue()}"/>
diff --git a/hudson-core/src/main/resources/hudson/util/AWTProblem/index.jelly b/hudson-core/src/main/resources/hudson/util/AWTProblem/index.jelly
index f19891c4..a15fdddf 100644
--- a/hudson-core/src/main/resources/hudson/util/AWTProblem/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/AWTProblem/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<l:header title="Hudson" />
diff --git a/hudson-core/src/main/resources/hudson/util/AdministrativeError/index.jelly b/hudson-core/src/main/resources/hudson/util/AdministrativeError/index.jelly
index 821533dc..f2397475 100644
--- a/hudson-core/src/main/resources/hudson/util/AdministrativeError/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/AdministrativeError/index.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="${it.title}">
<l:main-panel>
diff --git a/hudson-core/src/main/resources/hudson/util/AdministrativeError/message.jelly b/hudson-core/src/main/resources/hudson/util/AdministrativeError/message.jelly
index 05ca85ca..c9dc4631 100644
--- a/hudson-core/src/main/resources/hudson/util/AdministrativeError/message.jelly
+++ b/hudson-core/src/main/resources/hudson/util/AdministrativeError/message.jelly
@@ -15,9 +15,10 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div class="error">
- ${it.message}
+ <j:out value="${it.message}"/>
<a href="${it.url}/">${%See the log for more details}</a>.
</div>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/util/DoubleLaunchChecker/index.jelly b/hudson-core/src/main/resources/hudson/util/DoubleLaunchChecker/index.jelly
index 150b9c62..15181964 100644
--- a/hudson-core/src/main/resources/hudson/util/DoubleLaunchChecker/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/DoubleLaunchChecker/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<l:header title="Hudson">
diff --git a/hudson-core/src/main/resources/hudson/util/HudsonFailedToLoad/index.jelly b/hudson-core/src/main/resources/hudson/util/HudsonFailedToLoad/index.jelly
index 9f8d65a8..ba9b4dcc 100644
--- a/hudson-core/src/main/resources/hudson/util/HudsonFailedToLoad/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/HudsonFailedToLoad/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<l:header title="Hudson" />
diff --git a/hudson-core/src/main/resources/hudson/util/HudsonIsLoading/index.jelly b/hudson-core/src/main/resources/hudson/util/HudsonIsLoading/index.jelly
index 2de172a3..88786142 100644
--- a/hudson-core/src/main/resources/hudson/util/HudsonIsLoading/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/HudsonIsLoading/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:statusCode value="503" /><!-- SERVICE NOT AVAILABLE -->
<l:layout title="Hudson">
diff --git a/hudson-core/src/main/resources/hudson/util/HudsonIsRestarting/index.jelly b/hudson-core/src/main/resources/hudson/util/HudsonIsRestarting/index.jelly
index b25fa4ec..fc283110 100644
--- a/hudson-core/src/main/resources/hudson/util/HudsonIsRestarting/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/HudsonIsRestarting/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:statusCode value="503" /><!-- SERVICE NOT AVAILABLE -->
<l:layout>
diff --git a/hudson-core/src/main/resources/hudson/util/IncompatibleAntVersionDetected/index.jelly b/hudson-core/src/main/resources/hudson/util/IncompatibleAntVersionDetected/index.jelly
index 638e2fef..88768359 100644
--- a/hudson-core/src/main/resources/hudson/util/IncompatibleAntVersionDetected/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/IncompatibleAntVersionDetected/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<l:header title="Hudson" />
diff --git a/hudson-core/src/main/resources/hudson/util/IncompatibleServletVersionDetected/index.jelly b/hudson-core/src/main/resources/hudson/util/IncompatibleServletVersionDetected/index.jelly
index 836048ab..f648276d 100644
--- a/hudson-core/src/main/resources/hudson/util/IncompatibleServletVersionDetected/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/IncompatibleServletVersionDetected/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<l:header title="Hudson" />
diff --git a/hudson-core/src/main/resources/hudson/util/IncompatibleVMDetected/index.jelly b/hudson-core/src/main/resources/hudson/util/IncompatibleVMDetected/index.jelly
index b331d46f..49d3ce00 100644
--- a/hudson-core/src/main/resources/hudson/util/IncompatibleVMDetected/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/IncompatibleVMDetected/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<l:header title="Hudson" />
diff --git a/hudson-core/src/main/resources/hudson/util/InsufficientPermissionDetected/index.jelly b/hudson-core/src/main/resources/hudson/util/InsufficientPermissionDetected/index.jelly
index ab838686..a5038573 100644
--- a/hudson-core/src/main/resources/hudson/util/InsufficientPermissionDetected/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/InsufficientPermissionDetected/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<l:header title="Hudson" />
diff --git a/hudson-core/src/main/resources/hudson/util/JNADoublyLoaded/index.jelly b/hudson-core/src/main/resources/hudson/util/JNADoublyLoaded/index.jelly
index e28c32d6..f20dc677 100644
--- a/hudson-core/src/main/resources/hudson/util/JNADoublyLoaded/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/JNADoublyLoaded/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout title="Hudson">
<l:header />
diff --git a/hudson-core/src/main/resources/hudson/util/NoHomeDir/index.jelly b/hudson-core/src/main/resources/hudson/util/NoHomeDir/index.jelly
index 009eba7a..efe16616 100644
--- a/hudson-core/src/main/resources/hudson/util/NoHomeDir/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/NoHomeDir/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<l:header title="Hudson" />
diff --git a/hudson-core/src/main/resources/hudson/util/NoTempDir/index.jelly b/hudson-core/src/main/resources/hudson/util/NoTempDir/index.jelly
index d18b40d4..96abe0ff 100644
--- a/hudson-core/src/main/resources/hudson/util/NoTempDir/index.jelly
+++ b/hudson-core/src/main/resources/hudson/util/NoTempDir/index.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:layout>
<l:header title="Hudson" />
diff --git a/hudson-core/src/main/resources/hudson/views/BuildButtonColumn/column.jelly b/hudson-core/src/main/resources/hudson/views/BuildButtonColumn/column.jelly
index e3be6e46..b6900715 100644
--- a/hudson-core/src/main/resources/hudson/views/BuildButtonColumn/column.jelly
+++ b/hudson-core/src/main/resources/hudson/views/BuildButtonColumn/column.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<td>
<j:if test="${job.buildable and job.hasPermission(job.BUILD)}">
diff --git a/hudson-core/src/main/resources/hudson/views/BuildButtonColumn/columnHeader.jelly b/hudson-core/src/main/resources/hudson/views/BuildButtonColumn/columnHeader.jelly
index c1207b3e..402041a1 100644
--- a/hudson-core/src/main/resources/hudson/views/BuildButtonColumn/columnHeader.jelly
+++ b/hudson-core/src/main/resources/hudson/views/BuildButtonColumn/columnHeader.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler">
<th width="1">
<st:nbsp/>
diff --git a/hudson-core/src/main/resources/hudson/views/ConsoleColumn/column.jelly b/hudson-core/src/main/resources/hudson/views/ConsoleColumn/column.jelly
index 51df1b3a..cc5ea653 100644
--- a/hudson-core/src/main/resources/hudson/views/ConsoleColumn/column.jelly
+++ b/hudson-core/src/main/resources/hudson/views/ConsoleColumn/column.jelly
@@ -14,6 +14,7 @@
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<td>
<j:choose>
diff --git a/hudson-core/src/main/resources/hudson/views/ConsoleColumn/columnHeader.jelly b/hudson-core/src/main/resources/hudson/views/ConsoleColumn/columnHeader.jelly
index 30ffe0c9..1ed34424 100644
--- a/hudson-core/src/main/resources/hudson/views/ConsoleColumn/columnHeader.jelly
+++ b/hudson-core/src/main/resources/hudson/views/ConsoleColumn/columnHeader.jelly
@@ -14,6 +14,7 @@
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<th>${%Console}</th>
- </j:jelly> \ No newline at end of file
+ </j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/views/DefaultMyViewsTabBar/myViewTabs.jelly b/hudson-core/src/main/resources/hudson/views/DefaultMyViewsTabBar/myViewTabs.jelly
index a909ac4e..74745bb6 100644
--- a/hudson-core/src/main/resources/hudson/views/DefaultMyViewsTabBar/myViewTabs.jelly
+++ b/hudson-core/src/main/resources/hudson/views/DefaultMyViewsTabBar/myViewTabs.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<!-- view tab bar -->
<l:tabBar>
diff --git a/hudson-core/src/main/resources/hudson/views/DefaultViewsTabBar/viewTabs.jelly b/hudson-core/src/main/resources/hudson/views/DefaultViewsTabBar/viewTabs.jelly
index a909ac4e..74745bb6 100644
--- a/hudson-core/src/main/resources/hudson/views/DefaultViewsTabBar/viewTabs.jelly
+++ b/hudson-core/src/main/resources/hudson/views/DefaultViewsTabBar/viewTabs.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<!-- view tab bar -->
<l:tabBar>
diff --git a/hudson-core/src/main/resources/hudson/views/JobColumn/column.jelly b/hudson-core/src/main/resources/hudson/views/JobColumn/column.jelly
index a24bfc8a..254a527a 100644
--- a/hudson-core/src/main/resources/hudson/views/JobColumn/column.jelly
+++ b/hudson-core/src/main/resources/hudson/views/JobColumn/column.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<td style="${indenter.getCss(job)}">
<a href="${jobBaseUrl}${job.shortUrl}" title="${job.description!=null? job.description :''}"> ${job.displayName}</a>
diff --git a/hudson-core/src/main/resources/hudson/views/JobColumn/columnHeader.jelly b/hudson-core/src/main/resources/hudson/views/JobColumn/columnHeader.jelly
index abc3268c..4f313abf 100644
--- a/hudson-core/src/main/resources/hudson/views/JobColumn/columnHeader.jelly
+++ b/hudson-core/src/main/resources/hudson/views/JobColumn/columnHeader.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<th initialSortDir="down">${%Job}</th>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/views/LastDurationColumn/column.jelly b/hudson-core/src/main/resources/hudson/views/LastDurationColumn/column.jelly
index a9842310..0d898182 100644
--- a/hudson-core/src/main/resources/hudson/views/LastDurationColumn/column.jelly
+++ b/hudson-core/src/main/resources/hudson/views/LastDurationColumn/column.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<td data="${lsBuild.duration ?: lfBuild.duration ?: '0'}">
<j:choose>
diff --git a/hudson-core/src/main/resources/hudson/views/LastDurationColumn/columnHeader.jelly b/hudson-core/src/main/resources/hudson/views/LastDurationColumn/columnHeader.jelly
index 0d5cbf90..090da839 100644
--- a/hudson-core/src/main/resources/hudson/views/LastDurationColumn/columnHeader.jelly
+++ b/hudson-core/src/main/resources/hudson/views/LastDurationColumn/columnHeader.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<th>${%Last Duration}</th>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/views/LastFailureColumn/column.jelly b/hudson-core/src/main/resources/hudson/views/LastFailureColumn/column.jelly
index 8f2f8d1d..afbcdf7c 100644
--- a/hudson-core/src/main/resources/hudson/views/LastFailureColumn/column.jelly
+++ b/hudson-core/src/main/resources/hudson/views/LastFailureColumn/column.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<td data="${lfBuild.timestampString2 ?: '-'}">
<j:choose>
diff --git a/hudson-core/src/main/resources/hudson/views/LastFailureColumn/columnHeader.jelly b/hudson-core/src/main/resources/hudson/views/LastFailureColumn/columnHeader.jelly
index ce710345..74a38123 100644
--- a/hudson-core/src/main/resources/hudson/views/LastFailureColumn/columnHeader.jelly
+++ b/hudson-core/src/main/resources/hudson/views/LastFailureColumn/columnHeader.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<th>${%Last Failure}</th>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/views/LastStableColumn/column.jelly b/hudson-core/src/main/resources/hudson/views/LastStableColumn/column.jelly
index 83101686..7f1fb938 100644
--- a/hudson-core/src/main/resources/hudson/views/LastStableColumn/column.jelly
+++ b/hudson-core/src/main/resources/hudson/views/LastStableColumn/column.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:set var="lstBuild" value="${job.lastStableBuild}"/>
<td data="${lstBuild.timestampString2 ?: '-'}">
diff --git a/hudson-core/src/main/resources/hudson/views/LastStableColumn/columnHeader.jelly b/hudson-core/src/main/resources/hudson/views/LastStableColumn/columnHeader.jelly
index 8b3d925a..4bfc2c96 100644
--- a/hudson-core/src/main/resources/hudson/views/LastStableColumn/columnHeader.jelly
+++ b/hudson-core/src/main/resources/hudson/views/LastStableColumn/columnHeader.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<th>${%Last Stable}</th>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/views/LastSuccessColumn/column.jelly b/hudson-core/src/main/resources/hudson/views/LastSuccessColumn/column.jelly
index f1ac6412..06c2fa2a 100644
--- a/hudson-core/src/main/resources/hudson/views/LastSuccessColumn/column.jelly
+++ b/hudson-core/src/main/resources/hudson/views/LastSuccessColumn/column.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<td data="${lsBuild.timestampString2 ?: '-'}">
<j:choose>
diff --git a/hudson-core/src/main/resources/hudson/views/LastSuccessColumn/columnHeader.jelly b/hudson-core/src/main/resources/hudson/views/LastSuccessColumn/columnHeader.jelly
index ce08c611..945d3edc 100644
--- a/hudson-core/src/main/resources/hudson/views/LastSuccessColumn/columnHeader.jelly
+++ b/hudson-core/src/main/resources/hudson/views/LastSuccessColumn/columnHeader.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<th>${%Last Success}</th>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/views/ListViewColumn/columnHeader.jelly b/hudson-core/src/main/resources/hudson/views/ListViewColumn/columnHeader.jelly
index 9c67969f..1c6ef6f6 100644
--- a/hudson-core/src/main/resources/hudson/views/ListViewColumn/columnHeader.jelly
+++ b/hudson-core/src/main/resources/hudson/views/ListViewColumn/columnHeader.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<th>${it.columnCaption}</th>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/views/ListViewColumn/config.jelly b/hudson-core/src/main/resources/hudson/views/ListViewColumn/config.jelly
index 03497897..f436c469 100644
--- a/hudson-core/src/main/resources/hudson/views/ListViewColumn/config.jelly
+++ b/hudson-core/src/main/resources/hudson/views/ListViewColumn/config.jelly
@@ -16,4 +16,5 @@
<!-- Columns normally have nothing to configure. -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core"/>
diff --git a/hudson-core/src/main/resources/hudson/views/StatusColumn/column.jelly b/hudson-core/src/main/resources/hudson/views/StatusColumn/column.jelly
index a95100a0..4c1395f1 100644
--- a/hudson-core/src/main/resources/hudson/views/StatusColumn/column.jelly
+++ b/hudson-core/src/main/resources/hudson/views/StatusColumn/column.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<t:ballColorTd it="${job.iconColor}" style="${indenter.getRelativeShift(job)}"/>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/views/StatusColumn/columnHeader.jelly b/hudson-core/src/main/resources/hudson/views/StatusColumn/columnHeader.jelly
index 68439784..6fddb54e 100644
--- a/hudson-core/src/main/resources/hudson/views/StatusColumn/columnHeader.jelly
+++ b/hudson-core/src/main/resources/hudson/views/StatusColumn/columnHeader.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
- <th tooltip="${%Status of the last build}">${h.nbspIndent(iconSize)}S</th>
+ <th tooltip="${%Status of the last build}"><j:out value="${h.nbspIndent(iconSize)}"/>S</th>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/views/WeatherColumn/column.jelly b/hudson-core/src/main/resources/hudson/views/WeatherColumn/column.jelly
index f7affce7..bacba23a 100644
--- a/hudson-core/src/main/resources/hudson/views/WeatherColumn/column.jelly
+++ b/hudson-core/src/main/resources/hudson/views/WeatherColumn/column.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<t:buildHealth td="true" style="${indenter.getRelativeShift(job)}"
link="${jobBaseUrl}${job.shortUrl}lastBuild"/>
diff --git a/hudson-core/src/main/resources/hudson/views/WeatherColumn/columnHeader.jelly b/hudson-core/src/main/resources/hudson/views/WeatherColumn/columnHeader.jelly
index beb6ce68..f74b679c 100644
--- a/hudson-core/src/main/resources/hudson/views/WeatherColumn/columnHeader.jelly
+++ b/hudson-core/src/main/resources/hudson/views/WeatherColumn/columnHeader.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
- <th tooltip="${%Weather report showing aggregated status of recent builds}">${h.nbspIndent(iconSize)}W</th>
+ <th tooltip="${%Weather report showing aggregated status of recent builds}"><j:out value="${h.nbspIndent(iconSize)}"/>W</th>
</j:jelly>
diff --git a/hudson-core/src/main/resources/hudson/widgets/BuildHistoryWidget/entries.jelly b/hudson-core/src/main/resources/hudson/widgets/BuildHistoryWidget/entries.jelly
index d5546dea..a73a3167 100644
--- a/hudson-core/src/main/resources/hudson/widgets/BuildHistoryWidget/entries.jelly
+++ b/hudson-core/src/main/resources/hudson/widgets/BuildHistoryWidget/entries.jelly
@@ -18,6 +18,7 @@
<!--
Render build histories.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<!-- pending build -->
<j:set var="queuedItems" value="${it.queuedItems}" />
diff --git a/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/ajaxBuildHistory.jelly b/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/ajaxBuildHistory.jelly
index 5a16c055..49ac680d 100644
--- a/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/ajaxBuildHistory.jelly
+++ b/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/ajaxBuildHistory.jelly
@@ -17,6 +17,7 @@
<!--
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<l:ajax>
<table>
diff --git a/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/all.jelly b/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/all.jelly
index 9e6ad9e2..f710e287 100644
--- a/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/all.jelly
+++ b/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/all.jelly
@@ -18,6 +18,7 @@
<!--
Used by buildHistory.jelly to lazily fetch the complete build records.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout">
<l:ajax>
<j:set var="all" value="${true}"/>
diff --git a/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/entries.jelly b/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/entries.jelly
index c334d51c..6f3e9388 100644
--- a/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/entries.jelly
+++ b/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/entries.jelly
@@ -18,6 +18,7 @@
<!--
Render build histories.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:set target="${it}" property="nextBuildNumberToFetch" value="${it.owner.nextBuildNumber}"/>
<!-- build history -->
diff --git a/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/entry.jelly b/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/entry.jelly
index 2df42877..585b8f8f 100644
--- a/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/entry.jelly
+++ b/hudson-core/src/main/resources/hudson/widgets/HistoryWidget/entry.jelly
@@ -18,6 +18,7 @@
<!--
Render a single build history entry indicated by ${build}
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<j:set var="link" value="${it.baseUrl}/${build.number}/" />
<j:set var="transitive" value="${(it.firstTransientBuildKey!=null and (it.adapter.compare(build,it.firstTransientBuildKey) ge 0)) ? 'transitive' : null}" />
@@ -65,7 +66,7 @@
<tr class="${transitive}">
<td></td>
<td colspan="2" class="desc">
- ${build.truncatedDescription}
+ <j:out value="${build.truncatedDescription}"/>
</td>
</tr>
</j:if>
diff --git a/hudson-core/src/main/resources/lib/foo.jelly b/hudson-core/src/main/resources/lib/foo.jelly
index 845944db..7d3901ba 100644
--- a/hudson-core/src/main/resources/lib/foo.jelly
+++ b/hudson-core/src/main/resources/lib/foo.jelly
@@ -15,4 +15,5 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<b>JELLY TAG FILE ${value}</b>
diff --git a/hudson-core/src/main/resources/lib/form/advanced.jelly b/hudson-core/src/main/resources/lib/form/advanced.jelly
index e7c9ef21..70244f53 100644
--- a/hudson-core/src/main/resources/lib/form/advanced.jelly
+++ b/hudson-core/src/main/resources/lib/form/advanced.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Expandable section that shows "advanced..." button by default.
diff --git a/hudson-core/src/main/resources/lib/form/block.jelly b/hudson-core/src/main/resources/lib/form/block.jelly
index af5c266b..b0d33b7a 100644
--- a/hudson-core/src/main/resources/lib/form/block.jelly
+++ b/hudson-core/src/main/resources/lib/form/block.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Full-width space in the form table that can be filled with arbitrary HTML.
diff --git a/hudson-core/src/main/resources/lib/form/checkbox.jelly b/hudson-core/src/main/resources/lib/form/checkbox.jelly
index a026c4b7..f0d40bea 100644
--- a/hudson-core/src/main/resources/lib/form/checkbox.jelly
+++ b/hudson-core/src/main/resources/lib/form/checkbox.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
&lt;input type="checkbox"> tag that takes true/false for @checked, which is more Jelly friendly.
diff --git a/hudson-core/src/main/resources/lib/form/combobox.jelly b/hudson-core/src/main/resources/lib/form/combobox.jelly
index bd89abb4..209b13a5 100644
--- a/hudson-core/src/main/resources/lib/form/combobox.jelly
+++ b/hudson-core/src/main/resources/lib/form/combobox.jelly
@@ -16,6 +16,7 @@
<!-- Tomcat doesn't like us using the attribute called 'class' -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Editable drop-down combo box that supports the data binding and AJAX updates.
diff --git a/hudson-core/src/main/resources/lib/form/description.jelly b/hudson-core/src/main/resources/lib/form/description.jelly
index 341858aa..f12321e8 100644
--- a/hudson-core/src/main/resources/lib/form/description.jelly
+++ b/hudson-core/src/main/resources/lib/form/description.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Renders a row that shows description text below an input field.
diff --git a/hudson-core/src/main/resources/lib/form/descriptorList.jelly b/hudson-core/src/main/resources/lib/form/descriptorList.jelly
index 3edf27d4..d32ec997 100644
--- a/hudson-core/src/main/resources/lib/form/descriptorList.jelly
+++ b/hudson-core/src/main/resources/lib/form/descriptorList.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Generate config pages from a list of Descriptors into a section.
diff --git a/hudson-core/src/main/resources/lib/form/descriptorRadioList.jelly b/hudson-core/src/main/resources/lib/form/descriptorRadioList.jelly
index 45914957..66cd0575 100644
--- a/hudson-core/src/main/resources/lib/form/descriptorRadioList.jelly
+++ b/hudson-core/src/main/resources/lib/form/descriptorRadioList.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Generate config pages from a list of Descriptors into a section.
diff --git a/hudson-core/src/main/resources/lib/form/dropdownDescriptorSelector.jelly b/hudson-core/src/main/resources/lib/form/dropdownDescriptorSelector.jelly
index 854c4a89..d7b94bf5 100644
--- a/hudson-core/src/main/resources/lib/form/dropdownDescriptorSelector.jelly
+++ b/hudson-core/src/main/resources/lib/form/dropdownDescriptorSelector.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Renders a single &lt;select> control for choosing a Describable.
diff --git a/hudson-core/src/main/resources/lib/form/dropdownList.jelly b/hudson-core/src/main/resources/lib/form/dropdownList.jelly
index 9049e717..11b7f0f4 100644
--- a/hudson-core/src/main/resources/lib/form/dropdownList.jelly
+++ b/hudson-core/src/main/resources/lib/form/dropdownList.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
@@ -64,7 +65,7 @@
<j:if test="${!empty(attrs.description)}">
<f:description>
- ${description}
+ <j:out value="${description}"/>
</f:description>
</j:if>
<j:if test="${attrs.help!=null}">
diff --git a/hudson-core/src/main/resources/lib/form/dropdownListBlock.jelly b/hudson-core/src/main/resources/lib/form/dropdownListBlock.jelly
index ac76c77e..026b6216 100644
--- a/hudson-core/src/main/resources/lib/form/dropdownListBlock.jelly
+++ b/hudson-core/src/main/resources/lib/form/dropdownListBlock.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Foldable block expanded when the corresponding item is selected in the drop-down list.
diff --git a/hudson-core/src/main/resources/lib/form/editableComboBox.jelly b/hudson-core/src/main/resources/lib/form/editableComboBox.jelly
index cf1d28d2..64d69c23 100644
--- a/hudson-core/src/main/resources/lib/form/editableComboBox.jelly
+++ b/hudson-core/src/main/resources/lib/form/editableComboBox.jelly
@@ -16,6 +16,7 @@
<!-- Tomcat doesn't like us using the attribute called 'class' -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Editable drop-down combo box. Deprecated as of 1.356. Use f:combobox and databinding instead.
diff --git a/hudson-core/src/main/resources/lib/form/editableComboBoxValue.jelly b/hudson-core/src/main/resources/lib/form/editableComboBoxValue.jelly
index 6087d5e4..faec6185 100644
--- a/hudson-core/src/main/resources/lib/form/editableComboBoxValue.jelly
+++ b/hudson-core/src/main/resources/lib/form/editableComboBoxValue.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler">
<st:documentation>
Used inside &lt;f:editableComboBox/> to specify one value of a combobox.
diff --git a/hudson-core/src/main/resources/lib/form/entry.jelly b/hudson-core/src/main/resources/lib/form/entry.jelly
index 2109f48b..7ca4fbba 100644
--- a/hudson-core/src/main/resources/lib/form/entry.jelly
+++ b/hudson-core/src/main/resources/lib/form/entry.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
An entry of the &lt;f:form>, which is one logical row (that consists of
@@ -65,7 +66,7 @@
<tr class="${attrs.isPropertyOverridden? 'modified': 'original'}">
<td class="setting-leftspace"><st:nbsp/></td>
<td class="setting-name">
- ${attrs.title}
+ <j:out value="${attrs.title}" />
</td>
<td class="setting-main">
<d:invokeBody />
@@ -80,10 +81,10 @@
<tr class="validation-error-area"><td colspan="2" /><td /></tr>
<j:if test="${!empty(attrs.description)}">
<f:description isPropertyOverridden="${attrs.isPropertyOverridden}">
- ${description}
+ <j:out value="${description}"/>
</f:description>
</j:if>
<j:if test="${attrs.help!=null}">
<f:helpArea />
</j:if>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/form/enum.jelly b/hudson-core/src/main/resources/lib/form/enum.jelly
index 32e798ba..27ff8757 100644
--- a/hudson-core/src/main/resources/lib/form/enum.jelly
+++ b/hudson-core/src/main/resources/lib/form/enum.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Binds an enum field to a &lt;select> element.
diff --git a/hudson-core/src/main/resources/lib/form/enumSet.jelly b/hudson-core/src/main/resources/lib/form/enumSet.jelly
index 8146a285..874b38e7 100644
--- a/hudson-core/src/main/resources/lib/form/enumSet.jelly
+++ b/hudson-core/src/main/resources/lib/form/enumSet.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Binds a set of Enum to a list of checkboxes, each with the label taken from enum Enum.toString()
diff --git a/hudson-core/src/main/resources/lib/form/expandableTextbox.jelly b/hudson-core/src/main/resources/lib/form/expandableTextbox.jelly
index 1cb4a4bd..b3f3be82 100644
--- a/hudson-core/src/main/resources/lib/form/expandableTextbox.jelly
+++ b/hudson-core/src/main/resources/lib/form/expandableTextbox.jelly
@@ -18,6 +18,7 @@
<!--
TODO: support @checkUrl
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:d="jelly:define" xmlns:f="/lib/form" xmlns:st="jelly:stapler">
<st:documentation>
single-line textbox that can be expanded into a multi-line textarea.
diff --git a/hudson-core/src/main/resources/lib/form/form.jelly b/hudson-core/src/main/resources/lib/form/form.jelly
index 801d0aee..dc6c869e 100644
--- a/hudson-core/src/main/resources/lib/form/form.jelly
+++ b/hudson-core/src/main/resources/lib/form/form.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Outer-most tag of the entire form taglib, that generates &lt;form> element.
diff --git a/hudson-core/src/main/resources/lib/form/helpArea.jelly b/hudson-core/src/main/resources/lib/form/helpArea.jelly
index 512b95c3..eb2d094f 100644
--- a/hudson-core/src/main/resources/lib/form/helpArea.jelly
+++ b/hudson-core/src/main/resources/lib/form/helpArea.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Place holder to lazy-load help text via AJAX.
diff --git a/hudson-core/src/main/resources/lib/form/hetero-list.jelly b/hudson-core/src/main/resources/lib/form/hetero-list.jelly
index 11128731..039f95d2 100644
--- a/hudson-core/src/main/resources/lib/form/hetero-list.jelly
+++ b/hudson-core/src/main/resources/lib/form/hetero-list.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:local="local">
<st:documentation>
Outer most tag for creating a heterogeneous list, where the user can choose arbitrary number of
diff --git a/hudson-core/src/main/resources/lib/form/hetero-radio.jelly b/hudson-core/src/main/resources/lib/form/hetero-radio.jelly
index 6792f0fd..a8f9f5f3 100644
--- a/hudson-core/src/main/resources/lib/form/hetero-radio.jelly
+++ b/hudson-core/src/main/resources/lib/form/hetero-radio.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:local="local">
<st:documentation>
Sibling of hetero-list, which only allows the user to pick one type from the list of descriptors and configure it.
diff --git a/hudson-core/src/main/resources/lib/form/invisibleEntry.jelly b/hudson-core/src/main/resources/lib/form/invisibleEntry.jelly
index 02b45187..1049bcb9 100644
--- a/hudson-core/src/main/resources/lib/form/invisibleEntry.jelly
+++ b/hudson-core/src/main/resources/lib/form/invisibleEntry.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Invisible &lt;f:entry> type. Useful for adding hidden field values.
diff --git a/hudson-core/src/main/resources/lib/form/nested.jelly b/hudson-core/src/main/resources/lib/form/nested.jelly
index 2cf5a4d8..6c1cfa8a 100644
--- a/hudson-core/src/main/resources/lib/form/nested.jelly
+++ b/hudson-core/src/main/resources/lib/form/nested.jelly
@@ -18,6 +18,7 @@
<!--
Used to display indented nested portion of the form
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
<st:attribute name="isPropertyOverridden">
diff --git a/hudson-core/src/main/resources/lib/form/option.jelly b/hudson-core/src/main/resources/lib/form/option.jelly
index 7b8a0e80..615651fd 100644
--- a/hudson-core/src/main/resources/lib/form/option.jelly
+++ b/hudson-core/src/main/resources/lib/form/option.jelly
@@ -31,6 +31,6 @@
</st:documentation>
<!-- No escape/encode to avoid double-encoding if used in value attribute below -->
<j:set var="optionBody" encode="false"><d:invokeBody escapeText="false"/></j:set>
- <option value="${attrs.value!=null?attrs.value:optionBody}"
- selected="${attrs.selected?'true':null}">${optionBody}</option>
+ <option value="${attrs.value!=null?attrs.value:h.xmlUnescape(optionBody)}"
+ selected="${attrs.selected?'true':null}"><j:out value="${optionBody}"/></option>
</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/form/optionalBlock.jelly b/hudson-core/src/main/resources/lib/form/optionalBlock.jelly
index ee330773..da3a722f 100644
--- a/hudson-core/src/main/resources/lib/form/optionalBlock.jelly
+++ b/hudson-core/src/main/resources/lib/form/optionalBlock.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Foldable block that can be expanded to show more controls by checking the checkbox.
diff --git a/hudson-core/src/main/resources/lib/form/optionalProperty.jelly b/hudson-core/src/main/resources/lib/form/optionalProperty.jelly
index 77d9f03d..e6a6b8aa 100644
--- a/hudson-core/src/main/resources/lib/form/optionalProperty.jelly
+++ b/hudson-core/src/main/resources/lib/form/optionalProperty.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Renders inline an optional single-value nested data-bound property of the current instance,
diff --git a/hudson-core/src/main/resources/lib/form/password.jelly b/hudson-core/src/main/resources/lib/form/password.jelly
index c2feac51..cd49b703 100644
--- a/hudson-core/src/main/resources/lib/form/password.jelly
+++ b/hudson-core/src/main/resources/lib/form/password.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:d="jelly:define" xmlns:st="jelly:stapler" xmlns:f="/lib/form">
<st:documentation>
Glorified &lt;input type="password">
diff --git a/hudson-core/src/main/resources/lib/form/prepareDatabinding.jelly b/hudson-core/src/main/resources/lib/form/prepareDatabinding.jelly
index a5caa5bc..2dcbce26 100644
--- a/hudson-core/src/main/resources/lib/form/prepareDatabinding.jelly
+++ b/hudson-core/src/main/resources/lib/form/prepareDatabinding.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define">
<st:documentation>
Modifies the 'attrs.field' of the parent to inherit @field from the enclosing &lt;f:entry>
diff --git a/hudson-core/src/main/resources/lib/form/property.jelly b/hudson-core/src/main/resources/lib/form/property.jelly
index 09719dcf..0e743b9f 100644
--- a/hudson-core/src/main/resources/lib/form/property.jelly
+++ b/hudson-core/src/main/resources/lib/form/property.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Renders inline a single-value nested data-bound property of the current instance.
diff --git a/hudson-core/src/main/resources/lib/form/radio.jelly b/hudson-core/src/main/resources/lib/form/radio.jelly
index 6644fe01..5aaeef2f 100644
--- a/hudson-core/src/main/resources/lib/form/radio.jelly
+++ b/hudson-core/src/main/resources/lib/form/radio.jelly
@@ -20,5 +20,6 @@
Note that safari doesn't support onchange.
-->
+<?jelly escape-by-default='true'?>
<input type="radio" name="${attrs.name}" onclick="${attrs.onclick}" id="${attrs.id}" value="${attrs.value}"
checked="${attrs.checked?'true':null}"/>
diff --git a/hudson-core/src/main/resources/lib/form/radioBlock.jelly b/hudson-core/src/main/resources/lib/form/radioBlock.jelly
index 9a64679c..13703c1d 100644
--- a/hudson-core/src/main/resources/lib/form/radioBlock.jelly
+++ b/hudson-core/src/main/resources/lib/form/radioBlock.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Radio button with a label that hides additional controls.
@@ -68,4 +69,4 @@
<d:invokeBody/>
<!-- end marker -->
<tr class="radio-block-end" style="display:none"/>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/form/readOnlyTextbox.jelly b/hudson-core/src/main/resources/lib/form/readOnlyTextbox.jelly
index 4ee1a2c3..4b0d337f 100644
--- a/hudson-core/src/main/resources/lib/form/readOnlyTextbox.jelly
+++ b/hudson-core/src/main/resources/lib/form/readOnlyTextbox.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:f="/lib/form">
<st:documentation>
Generates an input field <tt>&lt;input type="text" ... /></tt> to be
diff --git a/hudson-core/src/main/resources/lib/form/repeatable.jelly b/hudson-core/src/main/resources/lib/form/repeatable.jelly
index 6a1a0843..587ed5c4 100644
--- a/hudson-core/src/main/resources/lib/form/repeatable.jelly
+++ b/hudson-core/src/main/resources/lib/form/repeatable.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation> <![CDATA[]
Repeatable blocks used to present UI where the user can configure multiple entries
diff --git a/hudson-core/src/main/resources/lib/form/repeatableDeleteButton.jelly b/hudson-core/src/main/resources/lib/form/repeatableDeleteButton.jelly
index 07a949e5..0c49d396 100644
--- a/hudson-core/src/main/resources/lib/form/repeatableDeleteButton.jelly
+++ b/hudson-core/src/main/resources/lib/form/repeatableDeleteButton.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Delete button for the &lt;repeatable> tag.
diff --git a/hudson-core/src/main/resources/lib/form/repeatableProperty.jelly b/hudson-core/src/main/resources/lib/form/repeatableProperty.jelly
index cefd442d..93578a65 100644
--- a/hudson-core/src/main/resources/lib/form/repeatableProperty.jelly
+++ b/hudson-core/src/main/resources/lib/form/repeatableProperty.jelly
@@ -36,6 +36,7 @@
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation> <![CDATA[]
Data-bound only version of <f:repeatable> that assumes the type pointed by the property is data-bound as well.
diff --git a/hudson-core/src/main/resources/lib/form/richtextarea.jelly b/hudson-core/src/main/resources/lib/form/richtextarea.jelly
index 63b09e09..cd235e24 100644
--- a/hudson-core/src/main/resources/lib/form/richtextarea.jelly
+++ b/hudson-core/src/main/resources/lib/form/richtextarea.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:l="/lib/layout">
<st:documentation>
Rich HTML editor from http://developer.yahoo.com/yui/editor/
diff --git a/hudson-core/src/main/resources/lib/form/rowSet.jelly b/hudson-core/src/main/resources/lib/form/rowSet.jelly
index 16728084..cbf16e37 100644
--- a/hudson-core/src/main/resources/lib/form/rowSet.jelly
+++ b/hudson-core/src/main/resources/lib/form/rowSet.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Adds @nameRef to all table rows inside this tag, so that when the form is submitted,
diff --git a/hudson-core/src/main/resources/lib/form/section.jelly b/hudson-core/src/main/resources/lib/form/section.jelly
index 98aa4fe1..7c227518 100644
--- a/hudson-core/src/main/resources/lib/form/section.jelly
+++ b/hudson-core/src/main/resources/lib/form/section.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
diff --git a/hudson-core/src/main/resources/lib/form/select.jelly b/hudson-core/src/main/resources/lib/form/select.jelly
index 3b8224e9..919acd6f 100644
--- a/hudson-core/src/main/resources/lib/form/select.jelly
+++ b/hudson-core/src/main/resources/lib/form/select.jelly
@@ -16,6 +16,7 @@
<!-- Tomcat doesn't like us using the attribute called 'class' -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Glorified &lt;select> control that supports the data binding and AJAX updates.
diff --git a/hudson-core/src/main/resources/lib/form/slave-mode.jelly b/hudson-core/src/main/resources/lib/form/slave-mode.jelly
index 1f37f24d..dede391c 100644
--- a/hudson-core/src/main/resources/lib/form/slave-mode.jelly
+++ b/hudson-core/src/main/resources/lib/form/slave-mode.jelly
@@ -21,6 +21,7 @@
@name : name of the <select> element
@node : Node object
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:entry title="${%Usage}" help="/help/system-config/master-slave/usage.html">
diff --git a/hudson-core/src/main/resources/lib/form/submit.jelly b/hudson-core/src/main/resources/lib/form/submit.jelly
index 0bd0ecbb..6030c9ea 100644
--- a/hudson-core/src/main/resources/lib/form/submit.jelly
+++ b/hudson-core/src/main/resources/lib/form/submit.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:s="jelly:stapler" xmlns:d="jelly:define" xmlns:f="/lib/form">
<s:documentation>
Submit button themed by YUI. This should be always
diff --git a/hudson-core/src/main/resources/lib/form/textarea.jelly b/hudson-core/src/main/resources/lib/form/textarea.jelly
index e0c09991..6829850c 100644
--- a/hudson-core/src/main/resources/lib/form/textarea.jelly
+++ b/hudson-core/src/main/resources/lib/form/textarea.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:f="/lib/form">
<st:documentation>
&lt;textarea> tag on steroids.
diff --git a/hudson-core/src/main/resources/lib/form/textbox.jelly b/hudson-core/src/main/resources/lib/form/textbox.jelly
index 8f5434dc..c97c58e2 100644
--- a/hudson-core/src/main/resources/lib/form/textbox.jelly
+++ b/hudson-core/src/main/resources/lib/form/textbox.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:f="/lib/form">
<st:documentation>
Generates an input field <tt>&lt;input type="text" ... /></tt> to be
diff --git a/hudson-core/src/main/resources/lib/form/validateButton.jelly b/hudson-core/src/main/resources/lib/form/validateButton.jelly
index 9e002471..d9381906 100644
--- a/hudson-core/src/main/resources/lib/form/validateButton.jelly
+++ b/hudson-core/src/main/resources/lib/form/validateButton.jelly
@@ -18,6 +18,7 @@
<!--
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
See
diff --git a/hudson-core/src/main/resources/lib/hudson/actions.jelly b/hudson-core/src/main/resources/lib/hudson/actions.jelly
index 408f8391..d82599d9 100644
--- a/hudson-core/src/main/resources/lib/hudson/actions.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/actions.jelly
@@ -18,6 +18,7 @@
<!--
Side panel for the build view.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:forEach var="action" items="${it.actions}">
<j:if test="${action.iconFileName!=null}">
diff --git a/hudson-core/src/main/resources/lib/hudson/artifactList.jelly b/hudson-core/src/main/resources/lib/hudson/artifactList.jelly
index 1c70c377..2d13356c 100644
--- a/hudson-core/src/main/resources/lib/hudson/artifactList.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/artifactList.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Generates a listing of the build artifacts.
@@ -41,7 +42,7 @@
<ul>
<j:forEach var="f" items="${artifacts}">
<li>
- <a href="${baseURL}artifact/${f.href}">${h.xmlEscape(f.displayPath)}</a>
+ <a href="${baseURL}artifact/${f.href}">${f.displayPath}</a>
<st:nbsp/>
<a href="${baseURL}artifact/${f.href}/*fingerprint*/"><img src="${imagesURL}/16x16/fingerprint.png" alt="[fingerprint]" /></a>
</li>
diff --git a/hudson-core/src/main/resources/lib/hudson/ballColorTd.jelly b/hudson-core/src/main/resources/lib/hudson/ballColorTd.jelly
index 3587c1be..8a0b34b7 100644
--- a/hudson-core/src/main/resources/lib/hudson/ballColorTd.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/ballColorTd.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Display the ball in a TD.
diff --git a/hudson-core/src/main/resources/lib/hudson/buildCaption.jelly b/hudson-core/src/main/resources/lib/hudson/buildCaption.jelly
index 160097b5..eb909e88 100644
--- a/hudson-core/src/main/resources/lib/hudson/buildCaption.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/buildCaption.jelly
@@ -18,6 +18,7 @@
<!--
displays a caption for build/externalRun.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<h1>
<j:if test="${it.building}">
diff --git a/hudson-core/src/main/resources/lib/hudson/buildHealth.jelly b/hudson-core/src/main/resources/lib/hudson/buildHealth.jelly
index 447ae3a4..172b8c7e 100644
--- a/hudson-core/src/main/resources/lib/hudson/buildHealth.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/buildHealth.jelly
@@ -21,6 +21,7 @@
<%@ attribute name="td" required="false" type="java.lang.String" %>
<%@ attribute name="link" required="false" type="java.lang.String" %>
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="buildHealth" value="${job.buildHealth}"/>
<j:if test="${td}"><j:set var="useTdElement" value="x"/></j:if>
diff --git a/hudson-core/src/main/resources/lib/hudson/buildLink.jelly b/hudson-core/src/main/resources/lib/hudson/buildLink.jelly
index 9f2a5042..389c4559 100644
--- a/hudson-core/src/main/resources/lib/hudson/buildLink.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/buildLink.jelly
@@ -24,6 +24,7 @@
number build number to link to.
href Link target. If missing, the top page of the build.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="jobName_" value="${h.appendSpaceIfNotNull(jobName)}"/>
<j:choose>
diff --git a/hudson-core/src/main/resources/lib/hudson/buildListTable.jelly b/hudson-core/src/main/resources/lib/hudson/buildListTable.jelly
index 7eee95c7..5e8cb609 100644
--- a/hudson-core/src/main/resources/lib/hudson/buildListTable.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/buildListTable.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<st:documentation>
Creates a table of builds.
diff --git a/hudson-core/src/main/resources/lib/hudson/buildProgressBar.jelly b/hudson-core/src/main/resources/lib/hudson/buildProgressBar.jelly
index 34f93aa6..b606608d 100644
--- a/hudson-core/src/main/resources/lib/hudson/buildProgressBar.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/buildProgressBar.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Progress bar for a build in progress.
diff --git a/hudson-core/src/main/resources/lib/hudson/buildRangeLink.jelly b/hudson-core/src/main/resources/lib/hudson/buildRangeLink.jelly
index c0087139..20743636 100644
--- a/hudson-core/src/main/resources/lib/hudson/buildRangeLink.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/buildRangeLink.jelly
@@ -22,6 +22,7 @@
<%@ attribute name="job" type="hudson.model.Job" required="true" %>
-->
<!-- it's hudson.model.Fingerprint.RangeSet but Tomcat can't seem to handler inner classes -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:forEach var="r" items="${range.ranges}">
<j:choose>
diff --git a/hudson-core/src/main/resources/lib/hudson/buildStatusSummary.jelly b/hudson-core/src/main/resources/lib/hudson/buildStatusSummary.jelly
index f1b9050f..f0b8baa2 100644
--- a/hudson-core/src/main/resources/lib/hudson/buildStatusSummary.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/buildStatusSummary.jelly
@@ -15,14 +15,15 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<j:set var="summary" value="${build.buildStatusSummary}"/>
<j:choose>
<j:when test="${summary.isWorse}">
- <font color='red'>${summary.message}</font>
+ <font color='red'><j:out value="${summary.message}"/></font>
</j:when>
<j:otherwise>
- ${summary.message}
+ <j:out value="${summary.message}"/>
</j:otherwise>
</j:choose>
</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/hudson/cascadingDescriptorList.jelly b/hudson-core/src/main/resources/lib/hudson/cascadingDescriptorList.jelly
index 1ece3f15..90bda8fd 100644
--- a/hudson-core/src/main/resources/lib/hudson/cascadingDescriptorList.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/cascadingDescriptorList.jelly
@@ -13,6 +13,7 @@
#
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:f="/lib/form">
<st:documentation>
Generates config pages from a list of Descriptors into a section. Tag is based on cascading functionality.
diff --git a/hudson-core/src/main/resources/lib/hudson/editTypeIcon.jelly b/hudson-core/src/main/resources/lib/hudson/editTypeIcon.jelly
index 8aab0cae..00bc95c4 100644
--- a/hudson-core/src/main/resources/lib/hudson/editTypeIcon.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/editTypeIcon.jelly
@@ -19,6 +19,7 @@
Displays the edit type icon.
<%@ attribute name="type" type="hudson.scm.EditType" required="true" %>
-->
+<?jelly escape-by-default='true'?>
<img width="16" height="16"
src="${imagesURL}/16x16/document_${type.name}.png"
title="${type.description}" alt="${type.description}" />
diff --git a/hudson-core/src/main/resources/lib/hudson/editableDescription.jelly b/hudson-core/src/main/resources/lib/hudson/editableDescription.jelly
index c81edff0..8df1040f 100644
--- a/hudson-core/src/main/resources/lib/hudson/editableDescription.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/editableDescription.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Renders ${it.description} and then allow it to be editable in place,
diff --git a/hudson-core/src/main/resources/lib/hudson/help.jelly b/hudson-core/src/main/resources/lib/hudson/help.jelly
index eafa75af..ec4bf920 100644
--- a/hudson-core/src/main/resources/lib/hudson/help.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/help.jelly
@@ -18,6 +18,7 @@
<!--
(?) icon linked to the specified @href
-->
+<?jelly escape-by-default='true'?>
<a href="${href}">
<img src="${imagesURL}/16x16/help.png" alt="[help]"/>
</a>
diff --git a/hudson-core/src/main/resources/lib/hudson/iconSize.jelly b/hudson-core/src/main/resources/lib/hudson/iconSize.jelly
index 2502f79d..f8651760 100644
--- a/hudson-core/src/main/resources/lib/hudson/iconSize.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/iconSize.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<table style="width:100%">
<tr>
diff --git a/hudson-core/src/main/resources/lib/hudson/jobLink.jelly b/hudson-core/src/main/resources/lib/hudson/jobLink.jelly
index 40aecf52..f4333c92 100644
--- a/hudson-core/src/main/resources/lib/hudson/jobLink.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/jobLink.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Generates a link to a job.
diff --git a/hudson-core/src/main/resources/lib/hudson/listScmBrowsers.jelly b/hudson-core/src/main/resources/lib/hudson/listScmBrowsers.jelly
index f157ea11..53fd295d 100644
--- a/hudson-core/src/main/resources/lib/hudson/listScmBrowsers.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/listScmBrowsers.jelly
@@ -14,6 +14,7 @@
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
List browser SCMs
diff --git a/hudson-core/src/main/resources/lib/hudson/newFromList/form.jelly b/hudson-core/src/main/resources/lib/hudson/newFromList/form.jelly
index 6a756e46..458e5a81 100644
--- a/hudson-core/src/main/resources/lib/hudson/newFromList/form.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/newFromList/form.jelly
@@ -25,6 +25,7 @@
@copyNames : options of names to choose from as the copy source. null to hide "copy" option
@checkUrl : form field validation url
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
<j:set var="descriptors" value="${h.filterDescriptors(it,attrs.descriptors)}" />
diff --git a/hudson-core/src/main/resources/lib/hudson/node.jelly b/hudson-core/src/main/resources/lib/hudson/node.jelly
index e2030cf3..4c63bec7 100644
--- a/hudson-core/src/main/resources/lib/hudson/node.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/node.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Displays a link to a node.
diff --git a/hudson-core/src/main/resources/lib/hudson/progressBar.jelly b/hudson-core/src/main/resources/lib/hudson/progressBar.jelly
index b5cc45eb..16f7e759 100644
--- a/hudson-core/src/main/resources/lib/hudson/progressBar.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/progressBar.jelly
@@ -23,6 +23,7 @@
href : if set, the progress bar becomes a hyperlink
red : if set to non-null, the progress bar will be drawn in red, to indicate that the processing is likely stuck.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<table class="progress-bar ${attrs.red?'red':null}" id="${attrs.id}" tooltip="${attrs.tooltip}" href="${attrs.href}" style="${attrs.href!=null ? 'cursor:pointer' : null}">
<j:choose>
diff --git a/hudson-core/src/main/resources/lib/hudson/progressiveText.jelly b/hudson-core/src/main/resources/lib/hudson/progressiveText.jelly
index 5f3cd30b..3c93f2c8 100644
--- a/hudson-core/src/main/resources/lib/hudson/progressiveText.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/progressiveText.jelly
@@ -25,6 +25,7 @@
<%@attribute name="spinner" required="false" description="ID of the HTML element in which the spinner is displayed" %>
<%@attribute name="startOffset" required="false" description="Skip this many bytes rather than showing from start of data" %>
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<!--
script code
diff --git a/hudson-core/src/main/resources/lib/hudson/project/build-permalink.jelly b/hudson-core/src/main/resources/lib/hudson/project/build-permalink.jelly
index 889212ba..bb1d4e5e 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/build-permalink.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/build-permalink.jelly
@@ -24,6 +24,7 @@
Title of the link
-->
<!-- TODO: delete once batch-task plugin is updated. -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:p="/lib/hudson/project">
<j:set var="b" value="${it[property]}"/>
<j:if test="${b!=null}">
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-blockWhenDownstreamBuilding.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-blockWhenDownstreamBuilding.jelly
index 433fc07d..cf639d82 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-blockWhenDownstreamBuilding.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-blockWhenDownstreamBuilding.jelly
@@ -16,6 +16,7 @@
<!-- Block build when downstream dependency is building -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="blockBuildWhenDownstreamBuildingProperty"
value="${cu.getBooleanProjectProperty(it, it.BLOCK_BUILD_WHEN_DOWNSTREAM_BUILDING_PROPERTY_NAME)}"/>
@@ -26,4 +27,4 @@
checked="${blockBuildWhenDownstreamBuilding}"
resetUrl="${jobUrl}/resetProjectProperty?propertyName=${it.BLOCK_BUILD_WHEN_DOWNSTREAM_BUILDING_PROPERTY_NAME}"
isPropertyOverridden="${blockBuildWhenDownstreamBuildingProperty.isOverridden()}"/>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-blockWhenUpstreamBuilding.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-blockWhenUpstreamBuilding.jelly
index d5b61fa4..4b4a2179 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-blockWhenUpstreamBuilding.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-blockWhenUpstreamBuilding.jelly
@@ -16,6 +16,7 @@
<!-- Block build when upstream dependency is building -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="blockBuildWhenUpstreamBuildingProperty"
value="${cu.getBooleanProjectProperty(it, it.BLOCK_BUILD_WHEN_UPSTREAM_BUILDING_PROPERTY_NAME)}"/>
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-buildWrappers.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-buildWrappers.jelly
index 37fdd9e5..28c95744 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-buildWrappers.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-buildWrappers.jelly
@@ -18,6 +18,7 @@
<!--
Build wrapper config pane
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:p="/lib/hudson/project">
<t:cascadingDescriptorList title="${%Build Environment}" descriptors="${h.getBuildWrapperDescriptors(it)}"/>
</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-builders.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-builders.jelly
index 6de6e911..27e800cd 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-builders.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-builders.jelly
@@ -18,6 +18,7 @@
<!--
Builder config pane
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:p="/lib/hudson/project">
<j:set var="buildersProperty" value="${cu.getDescribableListProjectProperty(it, it.BUILDERS_PROPERTY_NAME)}"/>
<j:set var="builders" value="${buildersProperty.getValue()}"/>
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-cleanWorkspace.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-cleanWorkspace.jelly
index f8294bdc..82f30d07 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-cleanWorkspace.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-cleanWorkspace.jelly
@@ -16,6 +16,7 @@
<!-- clean workspace -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="cleanWorkspaceRequiredProperty" value="${cu.getBooleanProjectProperty(it, it.CLEAN_WORKSPACE_REQUIRED_PROPERTY_NAME)}"/>
<j:set var="cleanWorkspaceRequired" value="${cleanWorkspaceRequiredProperty.getValue()}"/>
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-customWorkspace.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-customWorkspace.jelly
index 7bc2f7a6..58f75b23 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-customWorkspace.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-customWorkspace.jelly
@@ -16,6 +16,7 @@
<!-- custom workspace -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="customWorkspaceProperty" value="${cu.getStringProjectProperty(it, it.CUSTOM_WORKSPACE_PROPERTY_NAME)}"/>
<j:set var="customWorkspace" value="${customWorkspaceProperty.getValue()}"/>
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-disableBuild.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-disableBuild.jelly
index c24d2e88..1b6021f4 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-disableBuild.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-disableBuild.jelly
@@ -18,6 +18,7 @@
<!--
Configuration entry for disabling builds
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<f:optionalBlock name="disable" title="${%Disable Build} (${%No new builds will be executed until the project is re-enabled.})" checked="${it.disabled}"
help="/help/project-config/disable.html" />
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-publishers.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-publishers.jelly
index 6da65866..87139451 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-publishers.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-publishers.jelly
@@ -18,6 +18,7 @@
<!--
Publisher config pane
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:p="/lib/hudson/project">
<t:cascadingDescriptorList title="${%Post-build Actions}" descriptors="${h.getPublisherDescriptors(it)}"/>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-quietPeriod.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-quietPeriod.jelly
index f090138b..15cb6306 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-quietPeriod.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-quietPeriod.jelly
@@ -16,6 +16,7 @@
<!-- custom quiet period -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="quietPeriodProperty" value="${cu.getIntegerProjectProperty(it, it.QUIET_PERIOD_PROPERTY_NAME)}"/>
<j:set var="quietPeriod" value="${quietPeriodProperty.getValue()}"/>
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-retryCount.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-retryCount.jelly
index 6f3ffff0..4b5a60de 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-retryCount.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-retryCount.jelly
@@ -16,6 +16,7 @@
<!-- custom retry count -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="scmCheckoutRetryCountProperty" value="${cu.getIntegerProjectProperty(it, it.SCM_CHECKOUT_RETRY_COUNT_PROPERTY_NAME)}"/>
<j:set var="scmCheckoutRetryCount" value="${scmCheckoutRetryCountProperty.getValue()}"/>
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-scm.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-scm.jelly
index 973c129d..d94fccfa 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-scm.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-scm.jelly
@@ -16,6 +16,7 @@
<!-- SCM config pane -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="scmProperty" value="${cu.getScmProjectProperty(it, it.SCM_PROPERTY_NAME)}"/>
@@ -33,4 +34,4 @@
</f:radioBlock>
</j:forEach>
</f:section>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-trigger.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-trigger.jelly
index a4799a4d..c88fc1c7 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-trigger.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-trigger.jelly
@@ -18,6 +18,7 @@
<!--
Configure build triggers
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<!-- build triggers config pane -->
<j:invokeStatic var="triggers" className="hudson.triggers.Trigger" method="for_">
@@ -29,4 +30,4 @@
<!-- pseudo-trigger to configure URL to trigger builds remotely. -->
<st:include page="/hudson/model/BuildAuthorizationToken/config.jelly" />
</t:cascadingDescriptorList>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/hudson/project/config-upstream-pseudo-trigger.jelly b/hudson-core/src/main/resources/lib/hudson/project/config-upstream-pseudo-trigger.jelly
index f192d3d8..bedc95d9 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/config-upstream-pseudo-trigger.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/config-upstream-pseudo-trigger.jelly
@@ -20,6 +20,7 @@
"it" is assumed to be a Project object.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<!-- pseudo-trigger to list upstream projects. -->
<j:set var="up" value="${it.buildTriggerUpstreamProjects}" />
diff --git a/hudson-core/src/main/resources/lib/hudson/project/matrix.jelly b/hudson-core/src/main/resources/lib/hudson/project/matrix.jelly
index d7594449..27a4b795 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/matrix.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/matrix.jelly
@@ -21,6 +21,7 @@
Used by Matrix* classes
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
<st:documentation>
Generate configuration matrix and invoke body with 'p' as the instance of T
diff --git a/hudson-core/src/main/resources/lib/hudson/project/projectActionFloatingBox.jelly b/hudson-core/src/main/resources/lib/hudson/project/projectActionFloatingBox.jelly
index a8c4d733..b97fde48 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/projectActionFloatingBox.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/projectActionFloatingBox.jelly
@@ -18,6 +18,7 @@
<!--
Used in the index page to show floating boxes contributed from project actions.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div style="float:right">
<j:forEach var="a" items="${it.actions}">
diff --git a/hudson-core/src/main/resources/lib/hudson/project/upstream-downstream.jelly b/hudson-core/src/main/resources/lib/hudson/project/upstream-downstream.jelly
index 62a40307..d276a986 100644
--- a/hudson-core/src/main/resources/lib/hudson/project/upstream-downstream.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/project/upstream-downstream.jelly
@@ -18,6 +18,7 @@
<!--
Display upstream/downstream projects
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:local="local">
<d:taglib uri="local">
<d:tag name="relationship">
diff --git a/hudson-core/src/main/resources/lib/hudson/projectView.jelly b/hudson-core/src/main/resources/lib/hudson/projectView.jelly
index dac67b28..bca5e4e6 100644
--- a/hudson-core/src/main/resources/lib/hudson/projectView.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/projectView.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
diff --git a/hudson-core/src/main/resources/lib/hudson/projectViewNested.jelly b/hudson-core/src/main/resources/lib/hudson/projectViewNested.jelly
index 894c0013..a77d8acb 100644
--- a/hudson-core/src/main/resources/lib/hudson/projectViewNested.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/projectViewNested.jelly
@@ -18,6 +18,7 @@
<!--
Renders the nest view in <projectView />
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<tr>
diff --git a/hudson-core/src/main/resources/lib/hudson/projectViewRow.jelly b/hudson-core/src/main/resources/lib/hudson/projectViewRow.jelly
index 23348b72..fd4563cb 100644
--- a/hudson-core/src/main/resources/lib/hudson/projectViewRow.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/projectViewRow.jelly
@@ -21,6 +21,7 @@
@job : job to draw
@indenter
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout"
xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set var="lsBuild" value="${job.lastSuccessfulBuild}"/>
diff --git a/hudson-core/src/main/resources/lib/hudson/propertyTable.jelly b/hudson-core/src/main/resources/lib/hudson/propertyTable.jelly
index df09ba3d..8d7442ba 100644
--- a/hudson-core/src/main/resources/lib/hudson/propertyTable.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/propertyTable.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Dispaly sortable table of properties.
@@ -35,7 +36,7 @@
<j:invokeStatic var="escapedValue" className="hudson.Util" method="escapeString">
<j:arg value="${e.value}" />
</j:invokeStatic>
- ${escapedValue}
+ <j:out value="${escapedValue}"/>
</td>
</tr>
</j:forEach>
diff --git a/hudson-core/src/main/resources/lib/hudson/queue.jelly b/hudson-core/src/main/resources/lib/hudson/queue.jelly
index 504a71fa..5a85b182 100644
--- a/hudson-core/src/main/resources/lib/hudson/queue.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/queue.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Displays the build queue as &lt;l:pane>
diff --git a/hudson-core/src/main/resources/lib/hudson/rssBar-with-iconSize.jelly b/hudson-core/src/main/resources/lib/hudson/rssBar-with-iconSize.jelly
index a1101bf6..81405aac 100644
--- a/hudson-core/src/main/resources/lib/hudson/rssBar-with-iconSize.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/rssBar-with-iconSize.jelly
@@ -16,6 +16,7 @@
<!-- Deprecated since 1.345: use <t:iconSize><t:rssBar/></t:iconSize> -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:l="/lib/layout" xmlns:t="/lib/hudson">
<t:iconSize><t:rssBar/></t:iconSize>
</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/hudson/rssBar.jelly b/hudson-core/src/main/resources/lib/hudson/rssBar.jelly
index 0872f241..485f663d 100644
--- a/hudson-core/src/main/resources/lib/hudson/rssBar.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/rssBar.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div align="right" style="margin:1em">
<a href="${rootURL}/legend">${%Legend}</a>
diff --git a/hudson-core/src/main/resources/lib/hudson/scriptConsole.jelly b/hudson-core/src/main/resources/lib/hudson/scriptConsole.jelly
index 40d9ca4f..7514d5c6 100644
--- a/hudson-core/src/main/resources/lib/hudson/scriptConsole.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/scriptConsole.jelly
@@ -18,6 +18,7 @@
<!--
Called from doScript() to display the execution result and the form.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<l:layout norefresh="true">
<st:include page="sidepanel.jelly" />
diff --git a/hudson-core/src/main/resources/lib/hudson/setIconSize.jelly b/hudson-core/src/main/resources/lib/hudson/setIconSize.jelly
index 85dbad46..dffa6d51 100644
--- a/hudson-core/src/main/resources/lib/hudson/setIconSize.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/setIconSize.jelly
@@ -18,6 +18,7 @@
<!--
read icon size from a cookie and set it up
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:x="jelly:xml" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<j:set scope="parent" var="iconSize" value="${h.getCookie(request,'iconSize','32x32')}" />
<!--
diff --git a/hudson-core/src/main/resources/lib/hudson/summary.jelly b/hudson-core/src/main/resources/lib/hudson/summary.jelly
index 5e9d8c29..bc60d6c7 100644
--- a/hudson-core/src/main/resources/lib/hudson/summary.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/summary.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Displays a link with a large icon. Used in the project top page.
diff --git a/hudson-core/src/main/resources/lib/hudson/test-result.jelly b/hudson-core/src/main/resources/lib/hudson/test-result.jelly
index 939cfe4b..5ee13072 100644
--- a/hudson-core/src/main/resources/lib/hudson/test-result.jelly
+++ b/hudson-core/src/main/resources/lib/hudson/test-result.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<st:documentation>
Evaluates to a sstring that reports the test result number in text, like "(5 failures / +3)".
diff --git a/hudson-core/src/main/resources/lib/layout/ajax.jelly b/hudson-core/src/main/resources/lib/layout/ajax.jelly
index a4fbd4ed..180ab907 100644
--- a/hudson-core/src/main/resources/lib/layout/ajax.jelly
+++ b/hudson-core/src/main/resources/lib/layout/ajax.jelly
@@ -25,6 +25,7 @@
See MatrixProject/index.jelly and ajaxMatrix.jelly for how to use this tag.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form" xmlns:p="/lib/hudson/project">
<j:choose>
<j:when test="${rootURL!=null}">
diff --git a/hudson-core/src/main/resources/lib/layout/expandButton.jelly b/hudson-core/src/main/resources/lib/layout/expandButton.jelly
index e011f1e0..e990b9a7 100644
--- a/hudson-core/src/main/resources/lib/layout/expandButton.jelly
+++ b/hudson-core/src/main/resources/lib/layout/expandButton.jelly
@@ -23,6 +23,7 @@
Attributes:
@title : title of the button. required.
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div class="advancedLink">
<input type="button" value="${attrs.title}" class="expandButton" />
diff --git a/hudson-core/src/main/resources/lib/layout/hasPermission.jelly b/hudson-core/src/main/resources/lib/layout/hasPermission.jelly
index cb5cc43d..7f47b26c 100644
--- a/hudson-core/src/main/resources/lib/layout/hasPermission.jelly
+++ b/hudson-core/src/main/resources/lib/layout/hasPermission.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:d="jelly:define" xmlns:st="jelly:stapler">
<st:documentation>
Renders the body only if the current user has the specified permission
diff --git a/hudson-core/src/main/resources/lib/layout/header.jelly b/hudson-core/src/main/resources/lib/layout/header.jelly
index aaeb0149..accf0b98 100644
--- a/hudson-core/src/main/resources/lib/layout/header.jelly
+++ b/hudson-core/src/main/resources/lib/layout/header.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:s="jelly:stapler" xmlns:d="jelly:define">
<s:documentation>
Header portion of the HTML page, that gets rendered into the &lt;head> tag.
diff --git a/hudson-core/src/main/resources/lib/layout/isAdmin.jelly b/hudson-core/src/main/resources/lib/layout/isAdmin.jelly
index 048bc826..29f2d0d2 100644
--- a/hudson-core/src/main/resources/lib/layout/isAdmin.jelly
+++ b/hudson-core/src/main/resources/lib/layout/isAdmin.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:d="jelly:define" xmlns:s="jelly:stapler">
<j:if test="${h.hasPermission(app.ADMINISTER)}">
<d:invokeBody />
diff --git a/hudson-core/src/main/resources/lib/layout/isAdminOrTest.jelly b/hudson-core/src/main/resources/lib/layout/isAdminOrTest.jelly
index eed5a4da..215cfd89 100644
--- a/hudson-core/src/main/resources/lib/layout/isAdminOrTest.jelly
+++ b/hudson-core/src/main/resources/lib/layout/isAdminOrTest.jelly
@@ -18,6 +18,7 @@
<!--
<%@ attribute name="test" required="true" type="java.lang.Boolean" %>
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:d="jelly:define" xmlns:s="jelly:stapler">
<j:choose>
<j:when test="${!test &amp;&amp; app.useSecurity}">
diff --git a/hudson-core/src/main/resources/lib/layout/jobDeleteForm.jelly b/hudson-core/src/main/resources/lib/layout/jobDeleteForm.jelly
index e0c3d5e9..5b52e22a 100644
--- a/hudson-core/src/main/resources/lib/layout/jobDeleteForm.jelly
+++ b/hudson-core/src/main/resources/lib/layout/jobDeleteForm.jelly
@@ -13,6 +13,7 @@
#
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:i="jelly:fmt">
<script type="text/javascript">
function onDeleteClick() {
@@ -76,4 +77,4 @@
</div>
</form>
</div>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/layout/main-panel.jelly b/hudson-core/src/main/resources/lib/layout/main-panel.jelly
index 52ded1f6..feff94cb 100644
--- a/hudson-core/src/main/resources/lib/layout/main-panel.jelly
+++ b/hudson-core/src/main/resources/lib/layout/main-panel.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define">
<st:documentation>
Generates the body as the main content part of a Hudson page.
diff --git a/hudson-core/src/main/resources/lib/layout/pane.jelly b/hudson-core/src/main/resources/lib/layout/pane.jelly
index dea81e66..d2a0cd14 100644
--- a/hudson-core/src/main/resources/lib/layout/pane.jelly
+++ b/hudson-core/src/main/resources/lib/layout/pane.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:d="jelly:define" xmlns:st="jelly:stapler">
<st:documentation>
Used in the &lt;l:side-panel> to draw a box with a title.
@@ -36,7 +37,7 @@
</st:documentation>
<table class="pane" id="${attrs.id}">
<tr><td class="pane-header" colspan="${width}">
- ${title}
+ <j:out value="${title}"/>
</td></tr>
<d:invokeBody />
</table>
diff --git a/hudson-core/src/main/resources/lib/layout/rightspace.jelly b/hudson-core/src/main/resources/lib/layout/rightspace.jelly
index 3aa7dc71..30090e5e 100644
--- a/hudson-core/src/main/resources/lib/layout/rightspace.jelly
+++ b/hudson-core/src/main/resources/lib/layout/rightspace.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:d="jelly:define" xmlns:st="jelly:stapler">
<st:documentation>
Creates a space for the right-hand side of the page.
diff --git a/hudson-core/src/main/resources/lib/layout/searchPopup.jelly b/hudson-core/src/main/resources/lib/layout/searchPopup.jelly
index 29d66374..c28dd436 100644
--- a/hudson-core/src/main/resources/lib/layout/searchPopup.jelly
+++ b/hudson-core/src/main/resources/lib/layout/searchPopup.jelly
@@ -13,6 +13,7 @@
#
#
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:i="jelly:fmt">
<script src="${resURL}/scripts/popup-dialog.js" type="text/javascript" />
<script type="text/javascript">
@@ -47,4 +48,4 @@
<div id="searchDialog" style="display:none">
<h3>${%emptySearchCriteriaMessage}</h3>
</div>
-</j:jelly> \ No newline at end of file
+</j:jelly>
diff --git a/hudson-core/src/main/resources/lib/layout/side-panel.jelly b/hudson-core/src/main/resources/lib/layout/side-panel.jelly
index 0d372aa8..1d2bc793 100644
--- a/hudson-core/src/main/resources/lib/layout/side-panel.jelly
+++ b/hudson-core/src/main/resources/lib/layout/side-panel.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:s="jelly:stapler" xmlns:d="jelly:define">
<j:if test="${mode=='side-panel'}">
<d:invokeBody />
diff --git a/hudson-core/src/main/resources/lib/layout/tab.jelly b/hudson-core/src/main/resources/lib/layout/tab.jelly
index 37346357..2dc5301e 100644
--- a/hudson-core/src/main/resources/lib/layout/tab.jelly
+++ b/hudson-core/src/main/resources/lib/layout/tab.jelly
@@ -21,6 +21,7 @@
<%@ attribute name="active" required="true" type="java.lang.Boolean" %>
<%@ attribute name="title" required="false" type="java.lang.String" %>
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core">
<j:choose>
<j:when test="${tabPass=='pass1'}">
diff --git a/hudson-core/src/main/resources/lib/layout/tabBar.jelly b/hudson-core/src/main/resources/lib/layout/tabBar.jelly
index 5a71e6ce..0cd91400 100644
--- a/hudson-core/src/main/resources/lib/layout/tabBar.jelly
+++ b/hudson-core/src/main/resources/lib/layout/tabBar.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:d="jelly:define" xmlns:st="jelly:stapler">
<table cellpadding="0" cellspacing="0" id="viewList">
<j:set var="tab" value="${tabs}" />
diff --git a/hudson-core/src/main/resources/lib/layout/task.jelly b/hudson-core/src/main/resources/lib/layout/task.jelly
index 92130ee4..5211f62c 100644
--- a/hudson-core/src/main/resources/lib/layout/task.jelly
+++ b/hudson-core/src/main/resources/lib/layout/task.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define">
<st:documentation>
This tag inside &lt;l:tasks> tag renders the left navigation bar of Hudson.
diff --git a/hudson-core/src/main/resources/lib/layout/taskWithDialog.jelly b/hudson-core/src/main/resources/lib/layout/taskWithDialog.jelly
index 8e83ebe1..de4852f7 100644
--- a/hudson-core/src/main/resources/lib/layout/taskWithDialog.jelly
+++ b/hudson-core/src/main/resources/lib/layout/taskWithDialog.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define">
<st:documentation>
This tag inside &lt;l:tasks> tag renders the left navigation bar of Hudson.
diff --git a/hudson-core/src/main/resources/lib/layout/tasks.jelly b/hudson-core/src/main/resources/lib/layout/tasks.jelly
index 835ce826..e88511e0 100644
--- a/hudson-core/src/main/resources/lib/layout/tasks.jelly
+++ b/hudson-core/src/main/resources/lib/layout/tasks.jelly
@@ -25,6 +25,7 @@
...
</l:tasks>
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:d="jelly:define">
<div id="tasks">
<d:invokeBody />
diff --git a/hudson-core/src/main/resources/lib/layout/yui.jelly b/hudson-core/src/main/resources/lib/layout/yui.jelly
index 9ff0aaae..6e30bcb4 100644
--- a/hudson-core/src/main/resources/lib/layout/yui.jelly
+++ b/hudson-core/src/main/resources/lib/layout/yui.jelly
@@ -15,6 +15,7 @@
#************************************************************************** -->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler">
<st:documentation>
Load Yahoo UI module.
diff --git a/hudson-core/src/main/resources/lib/test/bar.jelly b/hudson-core/src/main/resources/lib/test/bar.jelly
index 710bff49..3ba71a6f 100644
--- a/hudson-core/src/main/resources/lib/test/bar.jelly
+++ b/hudson-core/src/main/resources/lib/test/bar.jelly
@@ -26,6 +26,7 @@
both objects need to have .failCount and .totalCount properties
-->
+<?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
<div>
<j:choose>

Back to the top