From 89e6d51ddc036cfd07fae18ea30909a7f86e2797 Mon Sep 17 00:00:00 2001
From: Julia Radzhabova <Julia.Radzhabova@onlyoffice.com>
Date: Thu, 15 Sep 2016 16:29:34 +0300
Subject: [PATCH] [DE] Fix Bug 33117.

---
 apps/common/main/lib/controller/ReviewChanges.js | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/apps/common/main/lib/controller/ReviewChanges.js b/apps/common/main/lib/controller/ReviewChanges.js
index 2efcf0de62..d0a9b4c2cb 100644
--- a/apps/common/main/lib/controller/ReviewChanges.js
+++ b/apps/common/main/lib/controller/ReviewChanges.js
@@ -201,7 +201,7 @@ define([
                         if (typeof value == 'object') {
                             _.each(value, function(obj) {
                                 if (typeof obj === 'string')
-                                    changetext += (' ' + obj);
+                                    changetext += (' ' + Common.Utils.String.htmlEncode(obj));
                                 else {
                                     switch (obj) {
                                         case 0:
@@ -220,7 +220,7 @@ define([
                                 }
                             })
                         } else if (typeof value === 'string') {
-                            changetext +=  (' ' + value);
+                            changetext +=  (' ' + Common.Utils.String.htmlEncode(value));
                         }
                     break;
                     case Asc.c_oAscRevisionsChangeType.TextRem:
@@ -228,7 +228,7 @@ define([
                         if (typeof value == 'object') {
                             _.each(value, function(obj) {
                                 if (typeof obj === 'string')
-                                    changetext += (' ' + obj);
+                                    changetext += (' ' + Common.Utils.String.htmlEncode(obj));
                                 else {
                                     switch (obj) {
                                         case 0:
@@ -247,7 +247,7 @@ define([
                                 }
                             })
                         } else if (typeof value === 'string') {
-                            changetext +=  (' ' + value);
+                            changetext +=  (' ' + Common.Utils.String.htmlEncode(value));
                         }
                     break;
                     case Asc.c_oAscRevisionsChangeType.ParaAdd: