Escape output

This commit is contained in:
Laurent Destailleur 2020-09-18 01:39:32 +02:00
parent 7704375ccd
commit 11b1e0b420

View File

@ -971,7 +971,7 @@ if ($action == 'create' && $user->rights->projet->creer)
$morehtmlref = '<div class="refidno">';
// Title
$morehtmlref .= $object->title;
$morehtmlref .= dol_escape_htmltag($object->title);
// Thirdparty
$morehtmlref .= '<br>'.$langs->trans('ThirdParty').' : ';
if ($object->thirdparty->id > 0)