[security] Fixed issue : XSS in survey list

LimeSurvey · Jun 17, 2017 · 06b6ce1 · 06b6ce1
1 parent fadb0cc
commit 06b6ce1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/application/extensions/admin/survey/ListSurveysWidget/views/listSurveys.php b/application/extensions/admin/survey/ListSurveysWidget/views/listSurveys.php
@@ -79,7 +79,7 @@
                         'header' => gT('Owner'),
                         'name' => 'owner',
                         'type' => 'raw',
-                        'value'=>'CHtml::link($data->owner->users_name, Yii::app()->createUrl("admin/survey/sa/view/",array("surveyid"=>$data->sid)))',
+                        'value'=>'CHtml::link(CHtml::encode($data->owner->users_name), Yii::app()->createUrl("admin/survey/sa/view/",array("surveyid"=>$data->sid)))',
                         'headerHtmlOptions'=>array('class' => 'hidden-md hidden-sm hidden-xs'),
                         'htmlOptions' => array('class' => 'hidden-md hidden-sm hidden-xs has-link'),
                     ),