From d2a744e4e02946b3f94ec76c420e4f13e02e0b06 Mon Sep 17 00:00:00 2001
From: Andrii Natiahlyi <natiahlyi@google.com>
Date: Wed, 10 Jun 2026 05:07:08 -0700
Subject: [PATCH] Escape domain names in the multi-store delete password dialog.

Fixed: 518814464
Change-Id: Ib1782405174df44d356fffe82d4aef95de8c59f8
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7913475
Auto-Submit: Andrii Natiahlyi <natiahlyi@google.com>
Reviewed-by: Adem Derinel <derinel@google.com>
Commit-Queue: Andrii Natiahlyi <natiahlyi@google.com>
Cr-Commit-Position: refs/heads/main@{#1644570}
---

diff --git a/chrome/browser/resources/password_manager/dialogs/multi_store_delete_password_dialog.ts b/chrome/browser/resources/password_manager/dialogs/multi_store_delete_password_dialog.ts
index 7aa224e4..607e3c0 100644
--- a/chrome/browser/resources/password_manager/dialogs/multi_store_delete_password_dialog.ts
+++ b/chrome/browser/resources/password_manager/dialogs/multi_store_delete_password_dialog.ts
@@ -19,6 +19,7 @@
 import type {CrDialogElement} from 'chrome://resources/cr_elements/cr_dialog/cr_dialog.js';
 import {I18nMixin} from 'chrome://resources/cr_elements/i18n_mixin.js';
 import {assert} from 'chrome://resources/js/assert.js';
+import {htmlEscape} from 'chrome://resources/js/util.js';
 import {PolymerElement} from 'chrome://resources/polymer/v3_0/polymer/polymer_bundled.min.js';
 
 import {PasswordManagerImpl} from '../password_manager_proxy.js';
@@ -119,9 +120,9 @@
     assert(this.duplicatedPassword.affiliatedDomains);
 
     return this.i18nAdvanced('deletePasswordDialogBody', {
-      substitutions:
-          [this.duplicatedPassword.affiliatedDomains.map(domain => domain.name)
-               .join(', ')],
+      substitutions: [this.duplicatedPassword.affiliatedDomains
+                          .map(domain => htmlEscape(domain.name))
+                          .join(', ')],
       tags: ['b'],
     });
   }