From 4344a4fcca67581ce29e577361bc84dd6a1fae78 Mon Sep 17 00:00:00 2001
From: wrongecho <32306651+wrongecho@users.noreply.github.com>
Date: Mon, 6 Mar 2023 21:12:58 +0000
Subject: [PATCH] Update ticket_reply_edit_modal.php

Sanitize any potential HTML output in ticket reply edit modal to summernote editor
---
 ticket_reply_edit_modal.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ticket_reply_edit_modal.php b/ticket_reply_edit_modal.php
index 65254056..955ef3a4 100644
--- a/ticket_reply_edit_modal.php
+++ b/ticket_reply_edit_modal.php
@@ -14,7 +14,7 @@
                 <div class="modal-body bg-white">
 
                     <div class="form-group">
-                        <textarea class="form-control summernote" rows="8" name="ticket_reply"><?php echo $ticket_reply; ?></textarea>
+                        <textarea class="form-control summernote" rows="8" name="ticket_reply"><?php echo htmlentities($ticket_reply); ?></textarea>
                     </div>
 
                     <?php if (!empty($ticket_reply_time_worked)) { ?>