From 9d054fa90548daf15e9ae36d463fafc1404f0617 Mon Sep 17 00:00:00 2001
From: Ivan Maslov <Ivan.Maslov@UnicodeLabs.ru>
Date: Wed, 16 Dec 2020 15:33:09 +0300
Subject: [PATCH] Fix ESCAPE in Basic Web CP

---
 Sources/pyOpenRPA/Orchestrator/Web/Basic.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Sources/pyOpenRPA/Orchestrator/Web/Basic.py b/Sources/pyOpenRPA/Orchestrator/Web/Basic.py
index cc339d06..910b2d72 100644
--- a/Sources/pyOpenRPA/Orchestrator/Web/Basic.py
+++ b/Sources/pyOpenRPA/Orchestrator/Web/Basic.py
@@ -31,11 +31,11 @@ def HTMLControlPanelBC(inCPDict):
     # FooterButtonX2List generation
     lFooterButtonX2Str = ""
     for lItem in inCPDict["FooterButtonX2List"]:
-        lFooterButtonX2Str+=f'<div class="ui basic {lItem.get("Color","")} button" onclick="{lItem.get("OnClick","")}">{lItem.get("Text","")}</div>'
+        lFooterButtonX2Str+=f'<div class="ui basic {lItem.get("Color","")} button" onclick="{JSEscapeForHTMLInline(lItem.get("OnClick",""))}">{lItem.get("Text","")}</div>'
     # FooterButtonX1List generation
     lFooterButtonX1Str = ""
     for lItem in inCPDict["FooterButtonX1List"]:
-        lFooterButtonX1Str+=f'<div class="ui basic {lItem.get("Color","")} button" onclick="{lItem.get("OnClick","")}">{lItem.get("Text","")}</div>'
+        lFooterButtonX1Str+=f'<div class="ui basic {lItem.get("Color","")} button" onclick="{JSEscapeForHTMLInline(lItem.get("OnClick",""))}">{lItem.get("Text","")}</div>'
     # BodyKeyValue generation
     lBodyKeyValueStr = ""
     for lItem in inCPDict["BodyKeyValueList"]: