Escape values to input fields (and some 'title' and 'alt')

[friendica.git] / view / templates / field_password.tpl

diff --git a/view/templates/field_password.tpl b/view/templates/field_password.tpl
index 2e9e91529ade3249167e7f6eafd25e5c3d5c12eb..8a9f0dc330e89ddf8fdb4609268b0dbc3851fd55 100644 (file)
--- a/view/templates/field_password.tpl
+++ b/view/templates/field_password.tpl
@@ -1,6 +1,6 @@
        
        <div class='field password' id='wrapper_{{$field.0}}'>
                <label for='id_{{$field.0}}'>{{$field.1}}</label>
-               <input type='password' name='{{$field.0}}' id='id_{{$field.0}}' value="{{$field.2}}"{{if $field.4 eq 'required'}} required{{/if}}{{if $field.5 eq 'autofocus'}} autofocus{{/if}}>
+               <input type='password' name='{{$field.0}}' id='id_{{$field.0}}' value="{{$field.2|escape:'html'}}"{{if $field.4 eq 'required'}} required{{/if}}{{if $field.5 eq 'autofocus'}} autofocus{{/if}}>
                <span class='field_help'>{{$field.3}}</span>
        </div>