At the search we should do it as well.

2016-09-23 06:36:48 +00:00 · 2016-09-23 06:36:48 +00:00 · 5f9a392fc4
parent 3f35fed35a
commit 5f9a392fc4
1 changed files with 1 additions and 1 deletions
--- a/include/text.php
+++ b/include/text.php
@ -988,7 +988,7 @@ function search($s,$id='search-box',$url='search',$save = false, $aside = true)
 	$a = get_app();

 	$values = array(
-			'$s' => $s,
+			'$s' => htmlspecialchars($s),
 			'$id' => $id,
 			'$action_url' => $url,
 			'$search_label' => t('Search'),