X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=view%2Ftemplates%2Fconfirm.tpl;h=a365678184b400804dcf0af7a986d9103f41c95a;hb=3b4f5f98f80b2f93304786b5bfd5faec91572a15;hp=6744ac4f745a52c27301e3690d4c7190db830108;hpb=6679d188263b6b717d318a9ab4c914265bcb0c1e;p=friendica.git

diff --git a/view/templates/confirm.tpl b/view/templates/confirm.tpl
index 6744ac4f74..a365678184 100644
--- a/view/templates/confirm.tpl
+++ b/view/templates/confirm.tpl
@@ -2,13 +2,13 @@
 <center>
 <form action="{{$confirm_url}}" id="confirm-form" method="{{$method}}">
 
-	<span id="confirm-message">{{$message}}</span>
+	<h3 id="confirm-message">{{$message}}</h3>
 	{{foreach $extra_inputs as $input}}
-	<input type="hidden" name="{{$input.name}}" value="{{$input.value}}" />
+	<input type="hidden" name="{{$input.name}}" value="{{$input.value|escape:'html'}}" />
 	{{/foreach}}
 
-	<input class="confirm-button" id="confirm-submit-button" type="submit" name="{{$confirm_name}}" value="{{$confirm}}" />
-	<input class="confirm-button" id="confirm-cancel-button" type="submit" name="canceled" value="{{$cancel}}" />
+	<input class="confirm-button" id="confirm-submit-button" type="submit" name="{{$confirm_name}}" value="{{$confirm|escape:'html'}}" />
+	<input class="confirm-button" id="confirm-cancel-button" type="submit" name="canceled" value="{{$cancel|escape:'html'}}" />
 
 </form>
 </center>