From 4a678ad1ec0512f792e158fa92c4f06bbe44f364 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Fri, 30 Apr 2021 09:31:50 +0200
Subject: [PATCH] escape workflow name, fix counting recipients

---
 views/bootstrap/class.ViewDocument.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/views/bootstrap/class.ViewDocument.php b/views/bootstrap/class.ViewDocument.php
index ad9027a3c..e6fbef655 100644
--- a/views/bootstrap/class.ViewDocument.php
+++ b/views/bootstrap/class.ViewDocument.php
@@ -832,7 +832,7 @@ class SeedDMS_View_ViewDocument extends SeedDMS_Theme_Style {
 				echo "</thead><tbody>";
 				foreach($wkflogt as $wkflog) {
 					echo "<tr>";
-					echo "<td>".$wkflog->getWorkflow()->getName()."</td>";
+					echo "<td>".htmlspecialchars($wkflog->getWorkflow()->getName())."</td>";
 					echo "<td>".$wkflog->getDate()."</td>";
 					echo "<td>".htmlspecialchars($wkflog->getTransition()->getAction()->getName())."</td>";
 					$loguser = $wkflog->getUser();
@@ -1325,7 +1325,7 @@ class SeedDMS_View_ViewDocument extends SeedDMS_Theme_Style {
 
 			print "<thead>\n";
 			print "<tr>\n";
-			print "<th width='20%'>".(($count($receiptStatus) > 5) ? '<input type="text" id="filterRecipientsInput" placeholder="'.getMLText('type_to_filter').'">' : getMLText('name'))."</th>\n";
+			print "<th width='20%'>".((count($receiptStatus) > 5) ? '<input type="text" id="filterRecipientsInput" placeholder="'.getMLText('type_to_filter').'">' : getMLText('name'))."</th>\n";
 			print "<th width='20%'>".getMLText("last_update")."</th>\n";
 			print "<th width='25%'>".getMLText("comment")."</th>";
 			print "<th width='15%'>".getMLText("status")."</th>\n";