diff --git a/htdocs/hrm/index.php b/htdocs/hrm/index.php index 2315edc100c..cdce14780f9 100644 --- a/htdocs/hrm/index.php +++ b/htdocs/hrm/index.php @@ -233,8 +233,8 @@ if (!empty($conf->holiday->enabled) && $user->rights->holiday->read) { print ''; print ''.$holidaystatic->getNomUrl(1).''; - print ''.$userstatic->getNomUrl(-1, 'leave').''; - print ''.$typeleaves[$obj->fk_type]['label'].''; + print ''.$userstatic->getNomUrl(-1, 'leave').''; + print ''.dol_escape_htmltag($typeleaves[$obj->fk_type]['label']).''; $starthalfday = ($obj->halfday == -1 || $obj->halfday == 2) ? 'afternoon' : 'morning'; $endhalfday = ($obj->halfday == 1 || $obj->halfday == 2) ? 'morning' : 'afternoon';