bugfix: avoid XSS in netdev ip forms (LMS #1910)

chilek · Oct 19, 2021 · cdadd9f · cdadd9f
1 parent 5c384c8
commit cdadd9f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/default/promotion/promotionschemainfobox.html b/templates/default/promotion/promotionschemainfobox.html
@@ -59,7 +59,7 @@
 				{icon name="money"}
 			</td>
 			<td class="nobr" colspan="2">
-				<A href="?m=promotioninfo&id={$schema.pid}">{$schema.promotion}</A>
+				<A href="?m=promotioninfo&id={$schema.pid}">{$schema.promotion|escape}</A>
 			</td>
 		</tr>
 		{if $schema.description}