diff options
| author | Thomas Bruederli <thomas@roundcube.net> | 2012-10-02 20:28:02 +0200 |
|---|---|---|
| committer | Thomas Bruederli <thomas@roundcube.net> | 2012-10-02 20:28:02 +0200 |
| commit | 6547093937cd4ee33adb7f9e55ce6851e25a6a8f (patch) | |
| tree | 2688409177d58d64bac864351a44645120e9bdfd /program/include | |
| parent | aa4612e7304d6a8f99842702593954c99a702b4d (diff) | |
Backported commit 10467e8a5957 and other improvements
Diffstat (limited to 'program/include')
| -rw-r--r-- | program/include/html.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/program/include/html.php b/program/include/html.php index c15ef45cb..dc93b3317 100644 --- a/program/include/html.php +++ b/program/include/html.php @@ -301,7 +301,7 @@ class html $attrib_arr[] = $key . '="' . Q($value, 'strict', false) . '"'; } else { - $attrib_arr[] = $key . '="' . Q($value) . '"'; + $attrib_arr[] = $key . '="' . htmlspecialchars($value, ENT_COMPAT, RCMAIL_CHARSET) . '"'; } } return count($attrib_arr) ? ' '.implode(' ', $attrib_arr) : ''; |