From 5936f278a6cda974537de8674aa81d3d5ecae52d Mon Sep 17 00:00:00 2001
From: cnathe <cnathe@labkey.com>
Date: Fri, 25 Sep 2026 15:52:53 -0500
Subject: [PATCH] GitHub Issue #1528: Encode group name for Delete Empty Group

---
 core/src/org/labkey/core/security/group.jsp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/src/org/labkey/core/security/group.jsp b/core/src/org/labkey/core/security/group.jsp
index 632193ee833..1a15011d65a 100644
--- a/core/src/org/labkey/core/security/group.jsp
+++ b/core/src/org/labkey/core/security/group.jsp
@@ -331,7 +331,7 @@ if (!bean.isSystemGroup)
     {
         %>
         <labkey:form action="<%=urlFor(StandardDeleteGroupAction.class)%>" method="POST">
-        <%= button("Delete Empty Group").submit(true).onClick("return confirm('Permanently delete group " + bean.groupName + "?')") %>
+        <%= button("Delete Empty Group").submit(true).onClick("return confirm(" + q("Permanently delete group " + bean.groupName + "?") + ")") %>
         <input type="hidden" name="group" value="<%= h(bean.groupName) %>">
         </labkey:form>
         <%