5633 filter title with htmlspecialchars

atutor · Mar 19, 2016 · e2cc51d · e2cc51d
1 parent d1517f1
commit e2cc51d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/themes/default/editor/edit_content_folder.tmpl.php b/themes/default/editor/edit_content_folder.tmpl.php
@@ -75,7 +75,7 @@
 	?>
 	<tr onmousedown="toggleTestSelect('r_<?php echo $row['test_id']; ?>');rowselect(this);" id="r_<?php echo $row['test_id']; ?>">
 		<td><input type="checkbox" name="tid[]" value="<?php echo $row['test_id']; ?>" id="t<?php echo $row['test_id']; ?>" <?php echo $checkMe; ?> onmouseup="this.checked=!this.checked" /></td>
-		<td><?php echo $row['title']; ?></td>
+		<td><?php echo htmlspecialchars($row['title']); ?></td>
 		<td><?php echo $row['status']; ?></td>
 		<!-- <td><?php echo $row['availability']; ?></td> -->
 		<td><?php echo $row['result_release']; ?></td>