Merge pull request #1510 from annando/1504-contact-update

[friendica.git] / view / templates / confirm.tpl

diff --git a/view/templates/confirm.tpl b/view/templates/confirm.tpl
index 6744ac4f745a52c27301e3690d4c7190db830108..bb9e159078477936bd18daaf8a7dfcbb7fd0f33b 100644 (file)
--- a/view/templates/confirm.tpl
+++ b/view/templates/confirm.tpl
@@ -4,11 +4,11 @@
 
        <span id="confirm-message">{{$message}}</span>
        {{foreach $extra_inputs as $input}}
-       <input type="hidden" name="{{$input.name}}" value="{{$input.value}}" />
+       <input type="hidden" name="{{$input.name}}" value="{{$input.value|escape:'html'}}" />
        {{/foreach}}
 
-       <input class="confirm-button" id="confirm-submit-button" type="submit" name="{{$confirm_name}}" value="{{$confirm}}" />
-       <input class="confirm-button" id="confirm-cancel-button" type="submit" name="canceled" value="{{$cancel}}" />
+       <input class="confirm-button" id="confirm-submit-button" type="submit" name="{{$confirm_name}}" value="{{$confirm|escape:'html'}}" />
+       <input class="confirm-button" id="confirm-cancel-button" type="submit" name="canceled" value="{{$cancel|escape:'html'}}" />
 
 </form>
 </center>