Contact names with ">" and "<" are a problem ...

[friendica.git] / mod / dirfind.php

diff --git a/mod/dirfind.php b/mod/dirfind.php
index 4156d3b1cf0e415bead4a33a907a894ae05f52a1..0c2505361ee123f322508b6c2c2e036a6c384873 100644 (file)
--- a/mod/dirfind.php
+++ b/mod/dirfind.php
@@ -139,7 +139,7 @@ function dirfind_content(&$a, $prefix = "") {
 
                                $o .= replace_macros($tpl,array(
                                        '$url' => zrl($jj->url),
-                                       '$name' => $jj->name,
+                                       '$name' => htmlentities($jj->name),
                                        '$photo' => proxy_url($jj->photo, false, PROXY_SIZE_THUMB),
                                        '$tags' => $jj->tags,
                                        '$conntxt' => $conntxt,