From d5e03f101a25c565634db0abd88dad26642c96f4 Mon Sep 17 00:00:00 2001
From: Andrew Malsbury <andrew@malsbury.tech>
Date: Mon, 9 Oct 2023 20:39:32 +0000
Subject: [PATCH] fixed what @wrongecho suggested.

---
 report_balance_sheet.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/report_balance_sheet.php b/report_balance_sheet.php
index e6d13c14..42b84396 100644
--- a/report_balance_sheet.php
+++ b/report_balance_sheet.php
@@ -155,11 +155,12 @@ function echoAccountRow($accountRow, $balance) {
         30 => "Equity"
     ];
     $account_type_string = $account_type_strings[$accountRow['account_type']] ?? "Unknown";
-    $account_name_encoded_numml = urlencode($accountRow['account_name']);
+    $account_name_encoded_nulled = nullable_htmlentities(urlencode($accountRow['account_name']));
+    $account_name_nulled = nullable_htmlentities($accountRow['account_name']);
     echo "
     <tr>
         <td>$account_type_string</td>
-        <td><a class=\"text-dark\" href=\"account_details.php?account_name=$account_name_encoded\">{$accountRow['account_name']}</a></td>
+        <td><a class=\"text-dark\" href=\"account_details.php?account_name=$account_name_encoded_nulled\">$account_name_nulled</a></td>
         <td class=\"text-right\">" . numfmt_format_currency($currency_format, $balance, $accountRow['account_currency_code']) . "</td>
     </tr>
     ";