Merge branch 'develop' into bug/6211-fix-contact-nets-all

[friendica.git] / view / theme / frio / templates / filebrowser.tpl

diff --git a/view/theme/frio/templates/filebrowser.tpl b/view/theme/frio/templates/filebrowser.tpl
index dc3c47a66a9ea05dcfec6805c561b7ec2c36596a..ce58ef0b98165c6e8e5551febd91ea991cfb4db9 100644 (file)
--- a/view/theme/frio/templates/filebrowser.tpl
+++ b/view/theme/frio/templates/filebrowser.tpl
@@ -9,11 +9,11 @@
 
 <div class="fbrowser {{$type}}">
        <div class="fbrowser-content">
-               <input id="fb-nickname" type="hidden" name="type" value="{{$nickname}}" />
-               <input id="fb-type" type="hidden" name="type" value="{{$type}}" />
+               <input id="fb-nickname" type="hidden" name="type" value="{{$nickname|escape}}" />
+               <input id="fb-type" type="hidden" name="type" value="{{$type|escape}}" />
 
                <div class="error hidden">
-                       <span></span> <button type="button" class="btn btn-link" class="close" aria-label="Close">X</a>
+                       <span></span> <button type="button" class="btn btn-link close" aria-label="Close">X</a>
                </div>
 
                {{* The breadcrumb navigation *}}
@@ -47,9 +47,9 @@
                                <div class="fbrowser-content-container">
                                        {{foreach $files as $f}}
                                        <div class="photo-album-image-wrapper">
-                                               <a href="#" class="photo-album-photo-link" data-link="{{$f.0}}" data-filename="{{$f.1}}" data-img="{{$f.2}}">
-                                                       <img src="{{$f.2}}" alt="{{$f.1}}">
-                                                       <p>{{$f.1}}</p>
+                                               <a href="#" class="photo-album-photo-link" data-link="{{$f.0}}" data-filename="{{$f.1|escape}}" data-img="{{$f.2|escape}}">
+                                                       <img src="{{$f.2}}" alt="{{$f.1|escape}}">
+                                                       <p>{{$f.1|escape}}</p>
                                                </a>
                                        </div>
                                        {{/foreach}}