Escape values to input fields (and some 'title' and 'alt')

[friendica.git] / view / templates / settings_display.tpl

diff --git a/view/templates/settings_display.tpl b/view/templates/settings_display.tpl
index 81e73e09cc4312f7d290e7299ea275f75d92c47b..12cdd3d668a29a9936f47259b19f7a43b5a953c0 100644 (file)
--- a/view/templates/settings_display.tpl
+++ b/view/templates/settings_display.tpl
@@ -16,7 +16,7 @@
 
 
 <div class="settings-submit-wrapper" >
-<input type="submit" name="submit" class="settings-submit" value="{{$submit}}" />
+<input type="submit" name="submit" class="settings-submit" value="{{$submit|escape:'html'}}" />
 </div>
 
 {{if $theme_config}}