Temporarily sanitize output in wrong place

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@14145 7612ce4b-ef26-0410-bec9-ea0150e637f0

diff --git a/templates/default/input.tpl b/templates/default/input.tpl
index 148c58c0b41a2b9c7967813d5d2b7587996611a4..5e0400f288cc9339bbcab81c333e9514dc785440 100644 (file)
--- a/templates/default/input.tpl
+++ b/templates/default/input.tpl
@@ -28,7 +28,8 @@ extract($t);
 
 echo '<input type="' . $type . '"';
 foreach ($aAttribs as $key => $value) {
 
 echo '<input type="' . $type . '"';
 foreach ($aAttribs as $key => $value) {

-    echo ' ' . $key . (is_null($value) ? '' : '="' . $value . '"');
+//TODO: see the FIXME tag on line 68 of functions/forms.php - the htmlspecialchars() below should be migrated to the template class
+    echo ' ' . $key . (is_null($value) ? '' : '="' . htmlspecialchars($value) . '"');

 }
 echo ' />';
 
 }
 echo ' />';