Escape values to input fields (and some 'title' and 'alt')

[friendica.git] / view / templates / field_input.tpl

diff --git a/view/templates/field_input.tpl b/view/templates/field_input.tpl
index 41a636fca40a292a8c69297bf47b1edc90eb9440..6a3328c5cc28dafe2dde8fba89d1baa6ba1d1bf7 100644 (file)
--- a/view/templates/field_input.tpl
+++ b/view/templates/field_input.tpl
@@ -1,6 +1,6 @@
        
        <div class='field input' id='wrapper_{{$field.0}}'>
                <label for='id_{{$field.0}}'>{{$field.1}}</label>
-               <input name='{{$field.0}}' id='id_{{$field.0}}' value="{{$field.2}}">
+               <input{{if $field.6 eq 'email'}} type='email'{{elseif $field.6 eq 'url'}} type='url'{{/if}} name='{{$field.0}}' id='id_{{$field.0}}' value="{{$field.2|escape:'html'}}"{{if $field.4 eq 'required'}} required{{/if}}{{if $field.5 eq 'autofocus'}} autofocus{{/if}}>
                <span class='field_help'>{{$field.3}}</span>
        </div>