From dc8c6ed7a95a095e6c045a79b8ab465cae4404e5 Mon Sep 17 00:00:00 2001 From: Stephen Abello Date: Thu, 2 Dec 2021 10:21:55 +0100 Subject: [PATCH] =?UTF-8?q?N=C2=B03835=20Tagsets=20displayed=20in=20histor?= =?UTF-8?q?y=20security=20hardening?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- core/attributedef.class.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/attributedef.class.inc.php b/core/attributedef.class.inc.php index 668bd0ea3..92268e39d 100644 --- a/core/attributedef.class.inc.php +++ b/core/attributedef.class.inc.php @@ -11607,7 +11607,7 @@ HTML; } else { - $sHtml .= ''.$oTag.''; + $sHtml .= ''.utils::EscapeHtml($oTag).''; } } $sHtml .= '';