X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;ds=sidebyside;f=view%2Ftemplates%2Fconfirm.tpl;h=bb9e159078477936bd18daaf8a7dfcbb7fd0f33b;hb=d5ad32a3097569a2ee44ac4948246db197b3a8d7;hp=6744ac4f745a52c27301e3690d4c7190db830108;hpb=191595766d399cfd012a10ef6f14f97c8ab87d1d;p=friendica.git

diff --git a/view/templates/confirm.tpl b/view/templates/confirm.tpl
index 6744ac4f74..bb9e159078 100644
--- a/view/templates/confirm.tpl
+++ b/view/templates/confirm.tpl
@@ -4,11 +4,11 @@
 
 	<span id="confirm-message">{{$message}}</span>
 	{{foreach $extra_inputs as $input}}
-	<input type="hidden" name="{{$input.name}}" value="{{$input.value}}" />
+	<input type="hidden" name="{{$input.name}}" value="{{$input.value|escape:'html'}}" />
 	{{/foreach}}
 
-	<input class="confirm-button" id="confirm-submit-button" type="submit" name="{{$confirm_name}}" value="{{$confirm}}" />
-	<input class="confirm-button" id="confirm-cancel-button" type="submit" name="canceled" value="{{$cancel}}" />
+	<input class="confirm-button" id="confirm-submit-button" type="submit" name="{{$confirm_name}}" value="{{$confirm|escape:'html'}}" />
+	<input class="confirm-button" id="confirm-cancel-button" type="submit" name="canceled" value="{{$cancel|escape:'html'}}" />
 
 </form>
 </center>