AS1024
/
Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add missing HTML escaping for textarea

This commit is contained in:
Frederic Guillot 2016-08-29 21:16:08 -04:00
parent 08bdb708e7
commit a3819c33d2
No known key found for this signature in database
GPG Key ID: 92D77191BA7FBC99
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/Helper/FormHelper.php
View File

@ -174,7 +174,7 @@ class FormHelper extends Base
$html = '<textarea name="'.$name.'" id="form-'.$name.'" class="'.$class.'" ';
$html .= implode(' ', $attributes).'>';
$html .= isset($values->$name) ? $this->helper->text->e($values->$name) : isset($values[$name]) ? $values[$name] : '';
$html .= isset($values[$name]) ? $this->helper->text->e($values[$name]) : '';
$html .= '</textarea>';
$html .= $this->errorList($errors, $name);