bugfix: avoid XSS in netdev ip forms (LMS #1910)

chilek · Oct 19, 2021 · 63c2f8e · 63c2f8e
1 parent cdadd9f
commit 63c2f8e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/default/promotion/promotionschemas.html b/templates/default/promotion/promotionschemas.html
@@ -42,7 +42,7 @@
 					</thead>
 					<tbody>
 						{foreach $promotion.schemas as $schema}
-							<TR class="highlight{if $schema.disabled} blend{/if}{if $schema.deleted} lms-ui-resource-deleted{/if}" data-name="{$schema.name}">
+							<TR class="highlight{if $schema.disabled} blend{/if}{if $schema.deleted} lms-ui-resource-deleted{/if}" data-name="{$schema.name|escape}">
 								<td data-target-url="?m=promotionschemainfo&id={$schema.id}" class="nobr">
 									<strong>{$schema.name|escape}</strong>
 									{if $schema.datefrom || $schema.dateto}