bugfix: avoid XSS in node group forms (LMS #1910)

chilek · Jun 11, 2021 · 21173d4 · 21173d4
1 parent a82a9b5
commit 21173d4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/default/node/nodegrouplist.html b/templates/default/node/nodegrouplist.html
@@ -49,7 +49,7 @@ <h1>{$layout.pagetitle}</h1>
 			<tr class="highlight" data-nodegroup-id="{$nodegroup.id}" data-name="{$nodegroup.name}">
 				<td data-target-url="?m=nodegroupinfo&id={$nodegroup.id}">
 					{icon name="nodegroup"}
-					<strong>{$nodegroup.name}</strong>
+					<strong>{$nodegroup.name|escape}</strong>
 					<br>
 					{if $nodegroup.description}
 						{icon name="info"}