From edffb52884b09562490081c3b8666ef46c296418 Mon Sep 17 00:00:00 2001
From: Madhura Jayaratne <madhura.cj@gmail.com>
Date: Mon, 18 Jan 2016 15:39:57 +1100
Subject: [PATCH] Fix XSS in zoom search

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
---
 templates/table/search/rows_zoom.phtml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/templates/table/search/rows_zoom.phtml b/templates/table/search/rows_zoom.phtml
index 06550cf4e8..1964eefbd0 100644
--- a/templates/table/search/rows_zoom.phtml
+++ b/templates/table/search/rows_zoom.phtml
@@ -56,7 +56,7 @@ for ($i = 0; $i < 4; $i++): ?>
         } ?>
         <!-- Column type -->
         <td dir="ltr">
-            <?php echo (isset($type[$i]) ? $type[$i] : ''); ?>
+            <?php echo (isset($type[$i]) ? htmlspecialchars($type[$i]) : ''); ?>
         </td>
         <!-- Column Collation -->
         <td>
@@ -68,7 +68,7 @@ for ($i = 0; $i < 4; $i++): ?>
         </td>
         <!-- Inputbox for search criteria value -->
         <td>
-            <?php echo (isset($value[$i]) ? $value[$i] : ''); ?>
+            <?php echo (isset($value[$i]) ? htmlspecialchars($value[$i]) : ''); ?>
         </td>
     </tr>
     <!-- Displays hidden fields -->