Sanitise outputs

2011-12-21 02:14:28 +00:00
parent 7110e75d43
commit 9af9c4dcb2
1 changed files with 2 additions and 2 deletions
--- a/source/webui/templates/index.tpl
+++ b/source/webui/templates/index.tpl
@@ -45,11 +45,11 @@
                                {if is_array($message)}
                                    {$severity=$message['severity']}
                                    <div class="alert-message {$severity}">
-                                        {$message['content']}
+                                        {$message['content']|escape:html}
                                    </div>
                                {else}
                                    <div class="alert-message info">
-                                        {$message}
+                                        {$message|escape:html}
                                    </div>
                                {/if}
                            {/foreach}