From 814d70e1ceca1b0a8546d46d70a4f25253f5af47 Mon Sep 17 00:00:00 2001
From: Christian Fowler <spider@viovio.com>
Date: Sat, 11 Mar 2006 06:42:03 +0000
Subject: escape comment title

---
 templates/comments.tpl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'templates')

diff --git a/templates/comments.tpl b/templates/comments.tpl
index c991e29..ec53650 100644
--- a/templates/comments.tpl
+++ b/templates/comments.tpl
@@ -31,7 +31,7 @@
 					<div class="row">
 						{formlabel label="Title" for="comments-title"}
 						{forminput}
-							<input type="text" size="50" name="comment_title" id="comments-title" value="{$postComment.title}" />
+							<input type="text" size="50" name="comment_title" id="comments-title" value="{$postComment.title|escape:html}" />
 							{formhelp note=""}
 						{/forminput}
 					</div>
@@ -97,7 +97,7 @@
 							<select name="comments_sort_mode" id="comments-sort">
 								<option value="commentDate_desc" {if $comments_sort_mode eq "commentDate_desc"}selected="selected"{/if}>Newest first</option>
 								<option value="commentDate_asc" {if $comments_sort_mode eq "commentDate_asc"}selected="selected"{/if}>Oldest first</option>
-							</select> 
+							</select>
 						</td>
 						<td style="text-align:right"><input type="submit" name="comments_setOptions" value="set" /></td>
 					</tr>
-- 
cgit v1.3