Escape values to input fields (and some 'title' and 'alt')

[friendica.git] / view / templates / event_form.tpl

diff --git a/view/templates/event_form.tpl b/view/templates/event_form.tpl
index cb7ba53af0fb7ab07d633c898a7465e9c6652e6f..45e2ea71e096ea996ca5272278d0e1c25f3cc0a7 100644 (file)
--- a/view/templates/event_form.tpl
+++ b/view/templates/event_form.tpl
@@ -28,7 +28,7 @@
 <div id="event-adjust-break"></div>
 
 <div id="event-summary-text">{{$t_text}}</div>
-<input type="text" id="event-summary" name="summary" value="{{$t_orig}}" />
+<input type="text" id="event-summary" name="summary" value="{{$t_orig|escape:'html'}}" />
 
 
 <div id="event-desc-text">{{$d_text}}</div>
@@ -44,7 +44,7 @@
 {{$acl}}
 
 <div class="clear"></div>
-<input id="event-submit" type="submit" name="submit" value="{{$submit}}" />
+<input id="event-submit" type="submit" name="submit" value="{{$submit|escape:'html'}}" />
 </form>