From 63c2f8edf75c210eba31a8882c37a51b874acdd0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tomasz=20Chili=C5=84ski?= <tomasz.chilinski@chilan.com>
Date: Tue, 19 Oct 2021 16:06:06 +0200
Subject: [PATCH] bugfix: avoid XSS in netdev ip forms (LMS #1910)

---
 templates/default/promotion/promotionschemas.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/default/promotion/promotionschemas.html b/templates/default/promotion/promotionschemas.html
index e44f66db67..e20ec94040 100644
--- a/templates/default/promotion/promotionschemas.html
+++ b/templates/default/promotion/promotionschemas.html
@@ -42,7 +42,7 @@
 					</thead>
 					<tbody>
 						{foreach $promotion.schemas as $schema}
-							<TR class="highlight{if $schema.disabled} blend{/if}{if $schema.deleted} lms-ui-resource-deleted{/if}" data-name="{$schema.name}">
+							<TR class="highlight{if $schema.disabled} blend{/if}{if $schema.deleted} lms-ui-resource-deleted{/if}" data-name="{$schema.name|escape}">
 								<td data-target-url="?m=promotionschemainfo&id={$schema.id}" class="nobr">
 									<strong>{$schema.name|escape}</strong>
 									{if $schema.datefrom || $schema.dateto}