From 06c3d068e0677a99d4b94cece549895df69bdaeb Mon Sep 17 00:00:00 2001
From: conradverm <conradverm@c91229c3-7414-0410-bfa2-8a42b809f60b>
Date: Fri, 13 Jul 2007 15:17:37 +0000
Subject: [PATCH] KTS-2178 "cross site scripting" Updated.

---
 templates/ktcore/forms/widgets/string.smarty | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/ktcore/forms/widgets/string.smarty b/templates/ktcore/forms/widgets/string.smarty
index 8bad37a..1de962c 100644
--- a/templates/ktcore/forms/widgets/string.smarty
+++ b/templates/ktcore/forms/widgets/string.smarty
@@ -1 +1 @@
-  <input type="text" name="{$name}" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value}"{/if}{if ($options.autocomplete === false)}autocomplete="off"{/if}  {if $options.width}size="{$options.width}"{/if} />
+  <input type="text" name="{$name}" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value|sanitize_input}"{/if}{if ($options.autocomplete === false)}autocomplete="off"{/if}  {if $options.width}size="{$options.width}"{/if} />
--
libgit2 0.21.4