Enable Smarty default HTML escaping

diff --git a/src/Render/FriendicaSmarty.php b/src/Render/FriendicaSmarty.php
index 8ecea05186fbbbf3e3e2beb0bcc69fc127e11ffa..413d746dcfce3620eabc87ddb0af38b8e8eb1285 100644 (file)
--- a/src/Render/FriendicaSmarty.php
+++ b/src/Render/FriendicaSmarty.php
@@ -42,6 +42,8 @@ class FriendicaSmarty extends Smarty
                $this->left_delimiter = Renderer::getTemplateLeftDelimiter('smarty3');
                $this->right_delimiter = Renderer::getTemplateRightDelimiter('smarty3');
 
+               $this->escape_html = true;
+
                // Don't report errors so verbosely
                $this->error_reporting = E_ALL & ~E_NOTICE;
        }