Escape printer and sender name for the printer invite banner.

chrome/browser/resources/print_preview/search/destination_search.js

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 cr.define('print_preview', function() {
   'use strict';
 
   /**
    * Component used for searching for a print destination.
    * This is a modal dialog that allows the user to search and select a
@@ skipping 463 matching lines @@
 
     /**
      * @param {!printe_preview.Invitation} invitation Invitation to show.
      * @private
      */
     showInvitation_: function(invitation) {
       var invitationText = '';
       if (invitation.asGroupManager) {
         invitationText = loadTimeData.getStringF(
             'groupPrinterSharingInviteText',
-            invitation.sender,
-            invitation.destination.displayName,
-            invitation.receiver);
+            HTMLEscape(invitation.sender),
+            HTMLEscape(invitation.destination.displayName),
+            HTMLEscape(invitation.receiver));
       } else {
         invitationText = loadTimeData.getStringF(
             'printerSharingInviteText',
-            invitation.sender,
-            invitation.destination.displayName);
+            HTMLEscape(invitation.sender),
+            HTMLEscape(invitation.destination.displayName));
       }
       this.getChildElement('.invitation-text').innerHTML = invitationText;
 
       var acceptButton = this.getChildElement('.invitation-accept-button');
       acceptButton.textContent = loadTimeData.getString(
           invitation.asGroupManager ? 'acceptForGroup' : 'accept');
       acceptButton.disabled = !!this.invitationStore_.invitationInProgress;
       this.getChildElement('.invitation-reject-button').disabled =
           !!this.invitationStore_.invitationInProgress;
       setIsVisible(
@@ skipping 186 matching lines @@
     onWindowResize_: function() {
       this.reflowLists_();
     }
   };
 
   // Export
   return {
     DestinationSearch: DestinationSearch
   };
 });