From f4c46af0ca0f5e717afe1aa04ea575fc53aa2971 Mon Sep 17 00:00:00 2001
From: Nate Wright <natew@notthisway.com>
Date: Tue, 27 Oct 2015 19:23:03 +0000
Subject: [PATCH] Add escaping to template output

---
 templates/frontend/components/breadcrumbs.tpl         | 2 +-
 templates/frontend/components/breadcrumbs_catalog.tpl | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/templates/frontend/components/breadcrumbs.tpl b/templates/frontend/components/breadcrumbs.tpl
index 3d9d232e705..66ce7af8363 100644
--- a/templates/frontend/components/breadcrumbs.tpl
+++ b/templates/frontend/components/breadcrumbs.tpl
@@ -27,7 +27,7 @@
 				{if $currentTitleKey}
 					{translate key=$currentTitleKey}
 				{else}
-					{$currentTitle}
+					{$currentTitle|escape}
 				{/if}
 			</h1>
 		</li>
diff --git a/templates/frontend/components/breadcrumbs_catalog.tpl b/templates/frontend/components/breadcrumbs_catalog.tpl
index 61fe954e6ca..553c25d6580 100644
--- a/templates/frontend/components/breadcrumbs_catalog.tpl
+++ b/templates/frontend/components/breadcrumbs_catalog.tpl
@@ -32,7 +32,7 @@
 		{if $parent}
 			<li>
 				<a href="{url op=$type path=$parent->getPath()}">
-					{$parent->getLocalizedTitle()}
+					{$parent->getLocalizedTitle()|escape}
 				</a>
 				<span class="separator">{translate key="navigation.breadcrumbSeparator"}</span>
 			</li>
@@ -42,7 +42,7 @@
 				{if $currentTitleKey}
 					{translate key=$currentTitleKey}
 				{else}
-					{$currentTitle}
+					{$currentTitle|escape}
 				{/if}
 			</h1>
 		</li>