diff options
| author | joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2006-09-04 04:31:41 +0000 |
|---|---|---|
| committer | joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071> | 2006-09-04 04:31:41 +0000 |
| commit | 9926ecf39c40c06f5084f34f7ad2427b56311fb2 (patch) | |
| tree | d39660d6509a90e981e0cbfbfc9d607ed5201c4f /templates/recentchanges.tmpl | |
| parent | b6075d61632adb1ec43fb5572db0521bbac9d1ac (diff) | |
| download | ikiwiki-9926ecf39c40c06f5084f34f7ad2427b56311fb2.tar ikiwiki-9926ecf39c40c06f5084f34f7ad2427b56311fb2.tar.gz | |
close a possible XSS hole
Diffstat (limited to 'templates/recentchanges.tmpl')
| -rw-r--r-- | templates/recentchanges.tmpl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/templates/recentchanges.tmpl b/templates/recentchanges.tmpl index 726e52f64..f927cf62f 100644 --- a/templates/recentchanges.tmpl +++ b/templates/recentchanges.tmpl @@ -30,7 +30,7 @@ <TMPL_LOOP NAME="CHANGELOG"> <!-- <TMPL_VAR NAME="REV"> --> <tr class="changeinfo"> - <td class="changeinfo"><TMPL_VAR NAME="USER"></td> + <td class="changeinfo"><TMPL_VAR NAME="USER" ESCAPE="HTML"></td> <td class="changetime"><TMPL_VAR NAME="WHEN"></td> <td class="changeinfo"> <TMPL_LOOP NAME="PAGES"> |