Add escaping to template output

pkp · Oct 28, 2015 · f4c46af · f4c46af
1 parent b7a4a71
commit f4c46af
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/templates/frontend/components/breadcrumbs.tpl b/templates/frontend/components/breadcrumbs.tpl
@@ -27,7 +27,7 @@
 				{if $currentTitleKey}
 					{translate key=$currentTitleKey}
 				{else}
-					{$currentTitle}
+					{$currentTitle|escape}
 				{/if}
 			</h1>
 		</li>

diff --git a/templates/frontend/components/breadcrumbs_catalog.tpl b/templates/frontend/components/breadcrumbs_catalog.tpl
@@ -32,7 +32,7 @@
 		{if $parent}
 			<li>
 				<a href="{url op=$type path=$parent->getPath()}">
-					{$parent->getLocalizedTitle()}
+					{$parent->getLocalizedTitle()|escape}
 				</a>
 				<span class="separator">{translate key="navigation.breadcrumbSeparator"}</span>
 			</li>
@@ -42,7 +42,7 @@
 				{if $currentTitleKey}
 					{translate key=$currentTitleKey}
 				{else}
-					{$currentTitle}
+					{$currentTitle|escape}
 				{/if}
 			</h1>
 		</li>