diff --git a/core/attributedef.class.inc.php b/core/attributedef.class.inc.php index 668bd0ea3..92268e39d 100644 --- a/core/attributedef.class.inc.php +++ b/core/attributedef.class.inc.php @@ -11607,7 +11607,7 @@ HTML; } else { - $sHtml .= ''.$oTag.''; + $sHtml .= ''.utils::EscapeHtml($oTag).''; } } $sHtml .= '';