Skip to content

Commit 1650d6a

Browse files
committed
Another fix for CVE-2020-35132 - closes #137, missed from #130
1 parent c84b2d6 commit 1650d6a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/PageRender.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -556,7 +556,7 @@ protected function drawOldValuesAttribute($attribute) {
556556
final protected function drawOldValueAttribute($attribute,$i) {
557557
if (DEBUGTMP) printf('<font size=-2>%s</font><br />',__METHOD__);
558558

559-
echo $attribute->getOldValue($i);
559+
echo htmlspecialchars($attribute->getOldValue($i));
560560
}
561561

562562
/** DRAW DISPLAYED CURRENT VALUES **/

0 commit comments

Comments
 (0)