X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=view%2Ftemplates%2Fconfirm.tpl;h=a365678184b400804dcf0af7a986d9103f41c95a;hb=b2bb600f3a878409f925524e1de90d0239b662b0;hp=6744ac4f745a52c27301e3690d4c7190db830108;hpb=a3f757808584145287f38934a68692e43c02fd22;p=friendica.git

diff --git a/view/templates/confirm.tpl b/view/templates/confirm.tpl
index 6744ac4f74..a365678184 100644
--- a/view/templates/confirm.tpl
+++ b/view/templates/confirm.tpl
@@ -2,13 +2,13 @@
 <center>
 <form action="{{$confirm_url}}" id="confirm-form" method="{{$method}}">
 
-	<span id="confirm-message">{{$message}}</span>
+	<h3 id="confirm-message">{{$message}}</h3>
 	{{foreach $extra_inputs as $input}}
-	<input type="hidden" name="{{$input.name}}" value="{{$input.value}}" />
+	<input type="hidden" name="{{$input.name}}" value="{{$input.value|escape:'html'}}" />
 	{{/foreach}}
 
-	<input class="confirm-button" id="confirm-submit-button" type="submit" name="{{$confirm_name}}" value="{{$confirm}}" />
-	<input class="confirm-button" id="confirm-cancel-button" type="submit" name="canceled" value="{{$cancel}}" />
+	<input class="confirm-button" id="confirm-submit-button" type="submit" name="{{$confirm_name}}" value="{{$confirm|escape:'html'}}" />
+	<input class="confirm-button" id="confirm-cancel-button" type="submit" name="canceled" value="{{$cancel|escape:'html'}}" />
 
 </form>
 </center>