escape group name in list of groups

This commit is contained in:
Uwe Steinmann 2019-06-13 09:03:30 +02:00
parent aed0c3cdf3
commit 0fe038e512

View File

@ -320,7 +320,7 @@ $(document).ready( function() {
); );
$options = array(); $options = array();
foreach($groups as $group) { foreach($groups as $group) {
$options[] = array($group->getID(), $group->getName(), ($currUser && $group->isMember($currUser))); $options[] = array($group->getID(), htmlspecialchars($group->getName()), ($currUser && $group->isMember($currUser)));
} }
$this->formField( $this->formField(
getMLText("groups"), getMLText("groups"),