From 5052d622934646ba2f908bfc141d5c27c47ca5d5 Mon Sep 17 00:00:00 2001
From: Nicholas Lopez <nico2k4@gmail.com>
Date: Mon, 21 Sep 2026 09:16:01 -0700
Subject: [PATCH] Add: escape necessary fields within beans.

---
 apps/i2ptunnel/java/src/net/i2p/i2ptunnel/web/EditBean.java | 6 +++---
 .../i2ptunnel/java/src/net/i2p/i2ptunnel/web/IndexBean.java | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/web/EditBean.java b/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/web/EditBean.java
index 3e674a5da..488df06d2 100644
--- a/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/web/EditBean.java
+++ b/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/web/EditBean.java
@@ -66,7 +66,7 @@ public class EditBean extends IndexBean {
     }
 
     public String getPrivateKeyFile(int tunnel) {
-        return _helper.getPrivateKeyFile(tunnel);
+        return DataHelper.escapeHTML(_helper.getPrivateKeyFile(tunnel));
     }
 
     /**
@@ -74,7 +74,7 @@ public class EditBean extends IndexBean {
      *  @since 0.9.30
      */
     public String getAltPrivateKeyFile(int tunnel) {
-        return _helper.getAltPrivateKeyFile(tunnel);
+        return DataHelper.escapeHTML(_helper.getAltPrivateKeyFile(tunnel));
     }
     
 /****
@@ -330,7 +330,7 @@ public class EditBean extends IndexBean {
      *  @since 0.9.40
      */
     public String getFilterDefinition(int tunnel) {
-        return _helper.getFilterDefinition(tunnel);
+        return DataHelper.escapeHTML(_helper.getFilterDefinition(tunnel));
     }
     
     public String getJumpList(int tunnel) {
diff --git a/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/web/IndexBean.java b/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/web/IndexBean.java
index 6d22da5ed..dd4906431 100644
--- a/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/web/IndexBean.java
+++ b/apps/i2ptunnel/java/src/net/i2p/i2ptunnel/web/IndexBean.java
@@ -544,7 +544,7 @@ public class IndexBean {
     }
     
     public String getClientInterface(int tunnel) {
-        return _helper.getClientInterface(tunnel);
+        return DataHelper.escapeHTML(_helper.getClientInterface(tunnel));
     }
     
     public int getTunnelStatus(int tunnel) {
@@ -564,7 +564,7 @@ public class IndexBean {
     }
     
     public String getClientDestination(int tunnel) {
-        return _helper.getClientDestination(tunnel);
+        return DataHelper.escapeHTML(_helper.getClientDestination(tunnel));
     }
     
     /**