This should be escaped

2011-09-20 13:02:54 +02:00 · 2011-09-20 13:02:54 +02:00 · 55d70a7fe1
commit 55d70a7fe1
parent d32bcb16c6
1 changed files with 1 additions and 1 deletions
--- a/libraries/config/FormDisplay.tpl.php
+++ b/libraries/config/FormDisplay.tpl.php
@ -49,7 +49,7 @@ function display_tabs_top($tabs)
 ?>
 <ul class="tabs">
 <?php foreach ($tabs as $tab_id => $tab_name): ?>
-    <li><a href="#<?php echo $tab_id ?>"><?php echo $tab_name ?></a></li>
+    <li><a href="#<?php echo $tab_id ?>"><?php echo htmlspecialchars($tab_name); ?></a></li>
 <?php endforeach; ?>
 </ul>
 <br clear="right" />