backported fix for CRM-20895

diff --git a/templates/CRM/common/displaySearchCriteria.tpl b/templates/CRM/common/displaySearchCriteria.tpl
index 2238649bd3a502c5d49858ce875355789c20c4dd..2e47c37b4486a02175061f6e88095880c6dfda75 100644 (file)
--- a/templates/CRM/common/displaySearchCriteria.tpl
+++ b/templates/CRM/common/displaySearchCriteria.tpl
@@ -31,7 +31,7 @@
         <ul>
         <li>
         {foreach from=$orClauses name=criteria item=item}
-            {$item}
+            {$item|escape}
             {if !$smarty.foreach.criteria.last}
                 <span class="font-italic">...{ts}AND{/ts}...</span>
             {/if}
@@ -52,10 +52,10 @@
     {else}
         {foreach from=$orClauses name=criteria item=item}
             <div class="qill">
-            {$item}
+            {$item|escape}
             {if !$smarty.foreach.criteria.last}
                 {if $operator}
-                  <span class="font-italic">...{$operator}...</span>
+                  <span class="font-italic">...{$operator|escape}...</span>
                 {else}
                   <span class="font-italic">...{ts}AND{/ts}...</span>
                 {/if}