From 7c884b14bd0d1a9d7bebe314e27ebd74ec0726ee Mon Sep 17 00:00:00 2001
From: marcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544>
Date: Tue, 10 Feb 2009 14:32:34 +0000
Subject: Refs #756: htmlentities on all input views

git-svn-id: https://code.elgg.org/elgg/trunk@2704 36083f99-b078-4883-b0ff-0f9b5a30f544
---
 views/default/input/access.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'views/default/input/access.php')

diff --git a/views/default/input/access.php b/views/default/input/access.php
index 9cd1e3d99..db938111e 100644
--- a/views/default/input/access.php
+++ b/views/default/input/access.php
@@ -35,9 +35,9 @@
 
     foreach($vars['options'] as $key => $option) {
         if ($key != $vars['value']) {
-            echo "<option value=\"{$key}\">{$option}</option>";
+            echo "<option value=\"{$key}\">". htmlentities($option, null, 'UTF-8') ."</option>";
         } else {
-            echo "<option value=\"{$key}\" selected=\"selected\">{$option}</option>";
+            echo "<option value=\"{$key}\" selected=\"selected\">". htmlentities($option, null, 'UTF-8') ."</option>";
         }
     }
 
-- 
cgit v1.2.3