X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=templates%2Fdefault%2Foptions.tpl;h=049d00385782c1abbbc57054981c3ff868d7d26b;hp=c6a15627a1e4e8a0e762a9793a23f97592cbbbd3;hb=14095490f3fb6743e538dd464ec217f583a04568;hpb=ae5dddc065f9501f267c4edaf68a066835da915f

diff --git a/templates/default/options.tpl b/templates/default/options.tpl
index c6a15627..049d0038 100644
--- a/templates/default/options.tpl
+++ b/templates/default/options.tpl
@@ -11,7 +11,7 @@
  *                       ['name']     - The name of the option group
  *                       ['options']  - array of squirrelOption objects
  *
- * @copyright 1999-2011 The SquirrelMail Project Team
+ * @copyright 1999-2021 The SquirrelMail Project Team
  * @license http://opensource.org/licenses/gpl-license.php GNU Public License
  * @version $Id$
  * @package squirrelmail
@@ -63,6 +63,7 @@ foreach ($option_groups as $option) {
 
             echo '<label for="new_' . $opt->name . '">' . $opt->caption;
             if ($opt->type == SMOPT_TYPE_TEXTAREA && !empty($opt->trailing_text)) {
+// TODO: Is trailing_text already sanitized here? (sm_encode_html_special_chars())  Either way, we want to have an option to sanitize or not depending on $opt->trailing_text_is_html ---- note that this question may already be taken care of in functions/options.php and irrelevant here, but I'm not sure about that yet.... after looking a little, it does appear this is a problem, though where to solve it is not clear
                 echo '<br /><small>' . $opt->trailing_text . '</small>';
             }
             echo '</label>';