Escape output

This commit is contained in:
Laurent Destailleur 2020-09-18 01:39:32 +02:00
parent 7704375ccd
commit 11b1e0b420

View File

@ -971,7 +971,7 @@ if ($action == 'create' && $user->rights->projet->creer)
$morehtmlref = '<div class="refidno">'; $morehtmlref = '<div class="refidno">';
// Title // Title
$morehtmlref .= $object->title; $morehtmlref .= dol_escape_htmltag($object->title);
// Thirdparty // Thirdparty
$morehtmlref .= '<br>'.$langs->trans('ThirdParty').' : '; $morehtmlref .= '<br>'.$langs->trans('ThirdParty').' : ';
if ($object->thirdparty->id > 0) if ($object->thirdparty->id > 0)