Update ticket_reply_edit_modal.php

Sanitize any potential HTML output in ticket reply edit modal to summernote editor
This commit is contained in:
wrongecho 2023-03-06 21:12:58 +00:00 committed by GitHub
parent b9112ddded
commit 4344a4fcca
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -14,7 +14,7 @@
<div class="modal-body bg-white">
<div class="form-group">
<textarea class="form-control summernote" rows="8" name="ticket_reply"><?php echo $ticket_reply; ?></textarea>
<textarea class="form-control summernote" rows="8" name="ticket_reply"><?php echo htmlentities($ticket_reply); ?></textarea>
</div>
<?php if (!empty($ticket_reply_time_worked)) { ?>