run help of config var through htmlspecialchars()

This commit is contained in:
Uwe Steinmann 2020-08-19 11:49:48 +02:00
parent 65c1bccf82
commit 395afcbcd4

View File

@ -124,7 +124,7 @@ class SeedDMS_View_Settings extends SeedDMS_Bootstrap_Style {
protected function showConfigPlain($title, $title_desc, $rawdata) { /* {{{ */
$settings = $this->params['settings'];
?>
<tr title="<?= $title_desc ?>">
<tr title="<?= htmlspecialchars($title_desc) ?>">
<td><?= $title ?>:</td>
<td><?= $rawdata ?></td>
</tr>