Escape emitted template option HTML.
This commit is contained in:
@ -59,7 +59,7 @@
|
|||||||
</form>
|
</form>
|
||||||
{serendipity_hookPlugin hook="quicksearch_plugin" hookAll="true"}
|
{serendipity_hookPlugin hook="quicksearch_plugin" hookAll="true"}
|
||||||
{if $template_option.header_img}
|
{if $template_option.header_img}
|
||||||
<img src="{$template_option.header_img}" alt="">
|
<img src="{$template_option.header_img|@escape:"html"}" alt="">
|
||||||
{/if}
|
{/if}
|
||||||
</header>
|
</header>
|
||||||
{if $template_option.use_corenav}
|
{if $template_option.use_corenav}
|
||||||
|
Reference in New Issue
Block a user