run output through htmlspecialchars()

This commit is contained in:
Uwe Steinmann 2022-09-02 08:03:54 +02:00
parent 1fa117281b
commit ab8d5ed502

View File

@ -95,7 +95,7 @@ class SeedDMS_View_ImportUsers extends SeedDMS_Theme_Style {
foreach($newusers as $uhash=>$newuser) {
foreach($colmap as $i=>$coldata) {
echo "<td>";
echo call_user_func($colmap[$i][1], $colmap[$i][2], $newuser);
echo htmlspecialchars(call_user_func($colmap[$i][1], $colmap[$i][2], $newuser));
echo "</td>\n";
}
echo "<td>";