From d29a7a5a6739198a080007aad0506f831b736fe1 Mon Sep 17 00:00:00 2001
From: Loui Chang <louipc.ist@gmail.com>
Date: Mon, 26 Oct 2009 12:54:31 -0400
Subject: pkg_search_results: Translate special characters to html entities.

Reported-by: Cedric Staniewski <cedric@gmx.ca>
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
---
 web/template/pkg_search_results.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'web/template')

diff --git a/web/template/pkg_search_results.php b/web/template/pkg_search_results.php
index bdb5f6c..b4415d7 100644
--- a/web/template/pkg_search_results.php
+++ b/web/template/pkg_search_results.php
@@ -67,7 +67,7 @@ for ($i = 0; $row = mysql_fetch_assoc($result); $i++) {
 	<?php endif; ?>
 	<?php endif; ?>
 	<td class='<?php print $c ?>'><span class='f4'><span class='blue'>
-	<?php print $row["Description"] ?></span></span></td>
+	<?php print htmlspecialchars($row['Description'], ENT_QUOTES); ?></span></span></td>
 	<td class='<?php print $c ?>'><span class='f5'><span class='blue'>
 	<?php if (isset($row["Maintainer"])): ?>
 	<a href='packages.php?K=<?php print $row['Maintainer'] ?>&amp;SeB=m'><?php print $row['Maintainer'] ?></a>
-- 
cgit v1.2.3-54-g00ecf