From: zapata <zapata>
Date: Mon, 17 Mar 2003 21:04:12 +0000 (+0000)
Subject: fixed missing escaping of textarea data
X-Git-Tag: BEFORE_MERGE_1_1~205
X-Git-Url: http://erislabs.org.uk/gitweb/?a=commitdiff_plain;h=1e589f1379f255854c36198eb30ac8717f754267;p=mir.git

fixed missing escaping of textarea data
---

diff --git a/templates/admin/fileedit.template b/templates/admin/fileedit.template
index 601c83dc..75f57a9f 100755
--- a/templates/admin/fileedit.template
+++ b/templates/admin/fileedit.template
@@ -21,7 +21,7 @@
         <input type="hidden" name="do" value="update">
 
 
-	 <textarea cols="120" rows="40" name="text" wrap=virtual>${text}</textarea>
+	 <textarea cols="120" rows="40" name="text" wrap=virtual>${utility.encodeHTML(text)}</textarea>
 
 <br>