Escape markdown code in column tooltips.

This is needed to avoid issues when the code contains quotes.
2015-03-04 17:03:04 +01:00
parent 23f8f2c576
commit 6696484bd0
6 changed files with 6 additions and 6 deletions
--- a/app/Template/board/edit.php
+++ b/app/Template/board/edit.php
@@ -13,7 +13,7 @@
    <tr>
        <td class="column-60"><?= $this->e($column['title']) ?>
         <?php if (! empty($column['description'])): ?>
-            <span class="column-tooltip" title='<?= $this->markdown($column['description']) ?>'>
+            <span class="column-tooltip" title='<?= $this->e($this->markdown($column['description'])) ?>'>
                <i class="fa fa-info-circle"></i>
            </span>
        <?php endif ?>