From 21173d42b6a402f2f3a4003fc06cf014a74e67b6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tomasz=20Chili=C5=84ski?= <tomasz.chilinski@chilan.com>
Date: Fri, 11 Jun 2021 16:25:47 +0200
Subject: [PATCH] bugfix: avoid XSS in node group forms (LMS #1910)

---
 templates/default/node/nodegrouplist.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/default/node/nodegrouplist.html b/templates/default/node/nodegrouplist.html
index c154758f95..ec12ad446a 100644
--- a/templates/default/node/nodegrouplist.html
+++ b/templates/default/node/nodegrouplist.html
@@ -49,7 +49,7 @@ <h1>{$layout.pagetitle}</h1>
 			<tr class="highlight" data-nodegroup-id="{$nodegroup.id}" data-name="{$nodegroup.name}">
 				<td data-target-url="?m=nodegroupinfo&id={$nodegroup.id}">
 					{icon name="nodegroup"}
-					<strong>{$nodegroup.name}</strong>
+					<strong>{$nodegroup.name|escape}</strong>
 					<br>
 					{if $nodegroup.description}
 						{icon name="info"}