From b53371b0512a034c68cc3c24d4fc42df6a7d40d3 Mon Sep 17 00:00:00 2001
From: ben <ben@36083f99-b078-4883-b0ff-0f9b5a30f544>
Date: Fri, 18 Jul 2008 08:58:05 +0000
Subject: Short text values are now properly escaped in the input/text view.

git-svn-id: https://code.elgg.org/elgg/trunk@1464 36083f99-b078-4883-b0ff-0f9b5a30f544
---
 views/default/input/text.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'views/default/input')

diff --git a/views/default/input/text.php b/views/default/input/text.php
index 0da751942..4b040445a 100644
--- a/views/default/input/text.php
+++ b/views/default/input/text.php
@@ -19,4 +19,4 @@
 
 ?>
 
-<input type="text" <?php echo $vars['js']; ?> name="<?php echo $vars['internalname']; ?>" value="<?php echo $vars['value']; ?>" class="input-text"/> 
\ No newline at end of file
+<input type="text" <?php echo $vars['js']; ?> name="<?php echo $vars['internalname']; ?>" value="<?php echo htmlentities($vars['value']); ?>" class="input-text"/> 
\ No newline at end of file
-- 
cgit v1.2.3