Escape values to input fields (and some 'title' and 'alt')

[friendica.git] / view / templates / settings_oauth.tpl

diff --git a/view/templates/settings_oauth.tpl b/view/templates/settings_oauth.tpl
index edb0ff63ec16738aacfb4a0c0d6a373530845576..164930ecbad5a37c8b97932605b01a4be2f6da0a 100644 (file)
--- a/view/templates/settings_oauth.tpl
+++ b/view/templates/settings_oauth.tpl
@@ -23,8 +23,8 @@
                        {{/if}}
                {{/if}}
                {{if $app.my}}
-               <a href="{{$baseurl}}/settings/oauth/edit/{{$app.client_id}}" class="icon s22 edit" title="{{$edit}}">&nbsp;</a>
-               <a href="{{$baseurl}}/settings/oauth/delete/{{$app.client_id}}?t={{$form_security_token}}" class="icon s22 delete" title="{{$delete}}">&nbsp;</a>
+               <a href="{{$baseurl}}/settings/oauth/edit/{{$app.client_id}}" class="icon s22 edit" title="{{$edit|escape:'html'}}">&nbsp;</a>
+               <a href="{{$baseurl}}/settings/oauth/delete/{{$app.client_id}}?t={{$form_security_token}}" class="icon s22 delete" title="{{$delete|escape:'html'}}">&nbsp;</a>
                {{/if}}         
        </div>
        {{/foreach}}