Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
fix: added missing conversion to HTML entities
  • Loading branch information
thorsten committed Dec 18, 2022
1 parent fb88fe5 commit 53099a9
Showing 1 changed file with 4 additions and 3 deletions.
7 changes: 4 additions & 3 deletions phpmyfaq/admin/record.comments.php
Expand Up @@ -20,6 +20,7 @@
use phpMyFAQ\Date;
use phpMyFAQ\Entity\CommentType;
use phpMyFAQ\Faq;
use phpMyFAQ\Strings;

if (!defined('IS_VALID_PHPMYFAQ')) {
http_response_code(400);
Expand Down Expand Up @@ -73,7 +74,7 @@
<td>
<span style="font-weight: bold;">
<a href="mailto:<?= $faqComment->getEmail() ?>">
<?= $faqComment->getUsername() ?>
<?= Strings::htmlentities($faqComment->getUsername()) ?>
</a> |
<?= $date->format(date('Y-m-d H:i', $faqComment->getDate())) ?> |
<a href="<?php printf(
Expand All @@ -84,8 +85,8 @@
) ?>">
<?= $faq->getRecordTitle($faqComment->getRecordId()) ?>
</a>
</span><br/>
<?= $faqComment->getComment() ?>
</span><br>
<?= Strings::htmlentities($faqComment->getComment()) ?>
</td>
</tr>
<?php
Expand Down

0 comments on commit 53099a9

Please sign in to comment.