Bug 4544: additional fix for 4.2.x

Signed-off-by: Marc Delisle <marc@infomarc.info>
2014-10-01 08:09:12 -04:00 · 2014-10-01 08:09:12 -04:00 · 304fb2b645
commit 304fb2b645
parent c1a3f85fbd
1 changed files with 2 additions and 1 deletions
--- a/libraries/TableSearch.class.php
+++ b/libraries/TableSearch.class.php
@ -992,7 +992,8 @@ EOT;
            $html_output .= '<td>' . $properties['collation'] . '</td>';
            $html_output .= '<td>' . $properties['func'] . '</td>';
            // here, the data-type attribute is needed for a date/time picker
-            $html_output .= '<td data-type="' . $properties['type'] . '"'
+            $html_output .= '<td data-type="'
+                . htmlspecialchars($properties['type']) . '"'
                . '>' . $properties['value'] . '</td>';
            $html_output .= '</tr>';
            //Displays hidden fields