From f72161e41e301bde7552b6ed6a99510faefb5635 Mon Sep 17 00:00:00 2001
From: "IETM_FIXE\\ietm6" <ietm64@igmlcreation.fr>
Date: Sat, 4 Jul 2026 11:42:18 +0200
Subject: [PATCH] =?UTF-8?q?Correction=20sur=20l'export=20PDF=20:=20probl?=
 =?UTF-8?q?=C3=A8me=20d'=C3=A9chappement=20de=20caract=C3=A8res=20qui=20fa?=
 =?UTF-8?q?isait=20p=C3=A9ter=20un=20test=20unitaire?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../infrastructure/transfer/pdf/PdfExportService.java         | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/core/src/main/java/com/loremind/infrastructure/transfer/pdf/PdfExportService.java b/core/src/main/java/com/loremind/infrastructure/transfer/pdf/PdfExportService.java
index 3017321..edbeae6 100644
--- a/core/src/main/java/com/loremind/infrastructure/transfer/pdf/PdfExportService.java
+++ b/core/src/main/java/com/loremind/infrastructure/transfer/pdf/PdfExportService.java
@@ -1283,7 +1283,9 @@ public class PdfExportService {
     private static String cssFor(String campaignName) {
         String header = campaignName == null ? "" : campaignName.trim();
         if (header.length() > 70) header = header.substring(0, 69) + "…";
-        return CSS.replace("__HEADER__", header.replace("\\", "\\\\").replace("'", "\\'"));
+        // Echappement CSS (chaine entre quotes) PUIS XML : le CSS vit dans <style>,
+        // du PCDATA — un '&' ou '<' brut casserait le parse du document entier.
+        return CSS.replace("__HEADER__", esc(header.replace("\\", "\\\\").replace("'", "\\'")));
     }
 
     // CSS print (CSS 2.1 + paged media supporte par openhtmltopdf : pas de flexbox/grid).