Fix escape

This commit is contained in:
Laurent Destailleur 2020-09-19 04:18:51 +02:00
parent e142b42f19
commit 46eb78cd41

View File

@ -390,7 +390,7 @@ if ($object->format == "D")
for ($i = 0; isset($toutsujet[$i]); $i++) for ($i = 0; isset($toutsujet[$i]); $i++)
{ {
$tmp = explode('@', $toutsujet[$i]); $tmp = explode('@', $toutsujet[$i]);
print '<td class="sujet">'.$tmp[0].'</td>'."\n"; print '<td class="sujet">'.dol_escape_htmltag($tmp[0]).'</td>'."\n";
} }
print '</tr>'."\n"; print '</tr>'."\n";