Temporarily sanitize output in wrong place

[squirrelmail.git] / templates / default / input.tpl

diff --git a/templates/default/input.tpl b/templates/default/input.tpl
index 148c58c0b41a2b9c7967813d5d2b7587996611a4..5e0400f288cc9339bbcab81c333e9514dc785440 100644 (file)
--- a/templates/default/input.tpl
+++ b/templates/default/input.tpl
@@ -28,7 +28,8 @@ extract($t);
 
 echo '<input type="' . $type . '"';
 foreach ($aAttribs as $key => $value) {
-    echo ' ' . $key . (is_null($value) ? '' : '="' . $value . '"');
+//TODO: see the FIXME tag on line 68 of functions/forms.php - the htmlspecialchars() below should be migrated to the template class
+    echo ' ' . $key . (is_null($value) ? '' : '="' . htmlspecialchars($value) . '"');
 }
 echo ' />';