From c5dbe1995d5fbcc15dbad3415b62a1180a759d46 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Fri, 4 Mar 2022 08:27:46 +0100
Subject: [PATCH] fix possible cross side scripting

---
 views/bootstrap/class.Help.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/views/bootstrap/class.Help.php b/views/bootstrap/class.Help.php
index 39283c9fa..610de136a 100644
--- a/views/bootstrap/class.Help.php
+++ b/views/bootstrap/class.Help.php
@@ -60,7 +60,7 @@ class SeedDMS_View_Help extends SeedDMS_Theme_Style {
 		$this->columnEnd();
 		$this->columnStart(8);
 ?>
-<legend><?php printMLText('help_'.strtolower($context), array(), $context); ?></legend>
+<legend><?= htmlspecialchars(getMLText('help_'.strtolower($context), array(), $context)); ?></legend>
 <?php
 
 		$helpfile = "../languages/".$this->params['session']->getLanguage()."/help/".$context.".html";