Merge "ClipData: html attribute values should always be escaped" into jb-mr1-dev

Author: nickkral

core/java/android/content/ClipData.java

@@ -563,7 +563,7 @@ private CharSequence coerceToHtmlOrStyledText(Context context, boolean styled) {
         private String uriToHtml(String uri) {
             StringBuilder builder = new StringBuilder(256);
             builder.append("<a href=\"");
-            builder.append(uri);
+            builder.append(Html.escapeHtml(uri));
             builder.append("\">");
             builder.append(Html.escapeHtml(uri));
             builder.append("</a>");