From f26917ad37c9888586e45f25b08d32898d749e07 Mon Sep 17 00:00:00 2001
From: Matthias Mees <mm@yellowled.de>
Date: Thu, 7 Feb 2013 16:28:32 +0100
Subject: [PATCH] Escape emitted template option HTML.

---
 templates/2k11/index.tpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/2k11/index.tpl b/templates/2k11/index.tpl
index 44baa670..bad854bc 100644
--- a/templates/2k11/index.tpl
+++ b/templates/2k11/index.tpl
@@ -59,7 +59,7 @@
         </form>
         {serendipity_hookPlugin hook="quicksearch_plugin" hookAll="true"}
         {if $template_option.header_img}
-        <img src="{$template_option.header_img}" alt="">
+        <img src="{$template_option.header_img|@escape:"html"}" alt="">
         {/if}
     </header>
     {if $template_option.use_corenav}