fix possible cross side scripting

This commit is contained in:
Uwe Steinmann 2022-03-04 08:27:46 +01:00
parent 1c4fbbed96
commit c5dbe1995d

View File

@ -60,7 +60,7 @@ class SeedDMS_View_Help extends SeedDMS_Theme_Style {
$this->columnEnd();
$this->columnStart(8);
?>
<legend><?php printMLText('help_'.strtolower($context), array(), $context); ?></legend>
<legend><?= htmlspecialchars(getMLText('help_'.strtolower($context), array(), $context)); ?></legend>
<?php
$helpfile = "../languages/".$this->params['session']->getLanguage()."/help/".$context.".html";