From 23d921d97765281852f20975b0d081fcbdb99a76 Mon Sep 17 00:00:00 2001 From: Demian Katz <demian.katz@villanova.edu> Date: Tue, 23 Feb 2016 11:43:07 -0500 Subject: [PATCH] Added missing escape. --- .../templates/RecordDriver/SolrDefault/list-entry.phtml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/themes/bootstrap3/templates/RecordDriver/SolrDefault/list-entry.phtml b/themes/bootstrap3/templates/RecordDriver/SolrDefault/list-entry.phtml index d8df15d4376..bbe4ecbf4eb 100644 --- a/themes/bootstrap3/templates/RecordDriver/SolrDefault/list-entry.phtml +++ b/themes/bootstrap3/templates/RecordDriver/SolrDefault/list-entry.phtml @@ -101,7 +101,7 @@ <? if (count($this->lists) > 0): ?> <strong><?=$this->transEsc('Saved in')?>:</strong> <? $i=0;foreach($this->lists as $current): ?> - <a href="<?=$this->url('userList', array('id' => $current->id))?>"><?=$current->title?></a><? if($i++ < count($this->lists)-1): ?>,<? endif; ?> + <a href="<?=$this->url('userList', array('id' => $current->id))?>"><?=$this->escapeHtml($current->title)?></a><? if($i++ < count($this->lists)-1): ?>,<? endif; ?> <? endforeach; ?> <br/> <? endif; ?> -- GitLab