Fix Flagging security flaw

vanilla · Aug 25, 2013 · e117af7 · e117af7
1 parent d42a988
commit e117af7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/plugins/Flagging/views/flagging.php b/plugins/Flagging/views/flagging.php
@@ -75,7 +75,7 @@
                ?>
                         <div class="FlaggedOtherCell">
                            <div class="FlaggedItemInfo"><?php echo T('On').' '.$Flag['DateInserted'].', <strong>'.Anchor($Flag['InsertName'],"profile/{$Flag['InsertUserID']}/{$Flag['InsertName']}").'</strong> '.T('said:'); ?></div>
-                           <div class="FlaggedItemComment">"<?php echo $Flag['Comment']; ?>"</div>
+                           <div class="FlaggedItemComment">"<?php echo Gdn_Format::Text($Flag['Comment']); ?>"</div>
                         </div>
                <?php
                      }