From 29df8f8f9271b169897d5155d0d18ce28ea4f098 Mon Sep 17 00:00:00 2001
From: Eric <eric.espie@combodo.com>
Date: Fri, 9 Nov 2018 10:09:42 +0100
Subject: [PATCH] =?UTF-8?q?N=C2=B01737=20-=20Tags=20HTML=20sanitization=20?=
 =?UTF-8?q?for=20display=20of=20labels?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 core/attributedef.class.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/attributedef.class.inc.php b/core/attributedef.class.inc.php
index aaa6403ea..f4bd5f9e9 100644
--- a/core/attributedef.class.inc.php
+++ b/core/attributedef.class.inc.php
@@ -10042,7 +10042,7 @@ class AttributeTagSet extends AttributeSet
 
 				$sHtml .= '<a'.$sLink.' class="attribute-set-item attribute-set-item-'.$sTagCode.'" data-code="'.$sTagCode.'" data-label="'.htmlentities($sTagLabel,
 						ENT_QUOTES, 'UTF-8').'" data-description="'.htmlentities($sTagDescription, ENT_QUOTES,
-						'UTF-8').'">'.$sTagLabel.'</a>';
+						'UTF-8').'">'.htmlentities($sTagLabel, ENT_QUOTES, 'UTF-8').'</a>';
 			}
 			else
 			{