From 2dafe0c1880b922d75a288f371fa976066589fd7 Mon Sep 17 00:00:00 2001
From: marcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544>
Date: Tue, 10 Feb 2009 18:36:31 +0000
Subject: Closes #756: htmlentities on all output forms

git-svn-id: https://code.elgg.org/elgg/trunk@2711 36083f99-b078-4883-b0ff-0f9b5a30f544
---
 views/default/output/email.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'views/default/output/email.php')

diff --git a/views/default/output/email.php b/views/default/output/email.php
index db3cdd6fa..e6b406507 100644
--- a/views/default/output/email.php
+++ b/views/default/output/email.php
@@ -16,6 +16,6 @@
 	 */
 
     if (!empty($vars['value'])) {
-    	echo "<a href=\"mailto:" . $vars['value'] . "\">". $vars['value'] ."</a>";
+    	echo "<a href=\"mailto:" . $vars['value'] . "\">". htmlentities($vars['value'], null, 'UTF-8') ."</a>";
     }
 ?>
\ No newline at end of file
-- 
cgit v1.2.3