From: Mark Hanna <mark@skvare.com>
Date: Sat, 21 Oct 2017 21:37:12 +0000 (-0500)
Subject: backported fix for CRM-20895
X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=14a6b325b8d96854143665195fef3f2f4e267dd2;p=civicrm-core.git

backported fix for CRM-20895
---

diff --git a/templates/CRM/common/displaySearchCriteria.tpl b/templates/CRM/common/displaySearchCriteria.tpl
index 2238649bd3..2e47c37b44 100644
--- a/templates/CRM/common/displaySearchCriteria.tpl
+++ b/templates/CRM/common/displaySearchCriteria.tpl
@@ -31,7 +31,7 @@
         <ul>
         <li>
         {foreach from=$orClauses name=criteria item=item}
-            {$item}
+            {$item|escape}
             {if !$smarty.foreach.criteria.last}
                 <span class="font-italic">...{ts}AND{/ts}...</span>
             {/if}
@@ -52,10 +52,10 @@
     {else}
         {foreach from=$orClauses name=criteria item=item}
             <div class="qill">
-            {$item}
+            {$item|escape}
             {if !$smarty.foreach.criteria.last}
                 {if $operator}
-                  <span class="font-italic">...{$operator}...</span>
+                  <span class="font-italic">...{$operator|escape}...</span>
                 {else}
                   <span class="font-italic">...{ts}AND{/ts}...</span>
                 {/if}