fix possible cross side scripting

This commit is contained in:
Uwe Steinmann 2022-03-04 08:27:46 +01:00
parent 1c4fbbed96
commit c5dbe1995d

View File

@ -60,7 +60,7 @@ class SeedDMS_View_Help extends SeedDMS_Theme_Style {
$this->columnEnd(); $this->columnEnd();
$this->columnStart(8); $this->columnStart(8);
?> ?>
<legend><?php printMLText('help_'.strtolower($context), array(), $context); ?></legend> <legend><?= htmlspecialchars(getMLText('help_'.strtolower($context), array(), $context)); ?></legend>
<?php <?php
$helpfile = "../languages/".$this->params['session']->getLanguage()."/help/".$context.".html"; $helpfile = "../languages/".$this->params['session']->getLanguage()."/help/".$context.".html";