From c7c37e530491c9855c55a72f47fa3e0f632e7555 Mon Sep 17 00:00:00 2001
From: Sean Madsen <sean@seanmadsen.com>
Date: Tue, 19 Sep 2017 14:26:02 -0600
Subject: [PATCH] CRM-20895 - Encode display of search criteria

---
 templates/CRM/common/displaySearchCriteria.tpl | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/templates/CRM/common/displaySearchCriteria.tpl b/templates/CRM/common/displaySearchCriteria.tpl
index a8f5065918..2258bfd53b 100644
--- a/templates/CRM/common/displaySearchCriteria.tpl
+++ b/templates/CRM/common/displaySearchCriteria.tpl
@@ -31,7 +31,7 @@
         <ul>
         <li>
         {foreach from=$orClauses name=criteria item=item}
-            {$item}
+            {$item|escape}
             {if !$smarty.foreach.criteria.last}
                 <span class="font-italic">...{ts}AND{/ts}...</span>
             {/if}
@@ -52,10 +52,10 @@
     {else}
         {foreach from=$orClauses name=criteria item=item}
             <div class="qill">
-            {$item}
+            {$item|escape}
             {if !$smarty.foreach.criteria.last}
                 {if $operator}
-                  <span class="font-italic">...{$operator}...</span>
+                  <span class="font-italic">...{$operator|escape}...</span>
                 {else}
                   <span class="font-italic">...{ts}AND{/ts}...</span>
                 {/if}
-- 
2.25.1