From 77344413ecd0c0627ecb050df42e412e357e0d4f Mon Sep 17 00:00:00 2001
From: conradverm <conradverm@c91229c3-7414-0410-bfa2-8a42b809f60b>
Date: Fri, 13 Jul 2007 15:18:03 +0000
Subject: [PATCH] KTS-2178 "cross site scripting" Updated.

---
 templates/ktcore/forms/widgets/password.smarty | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/templates/ktcore/forms/widgets/password.smarty b/templates/ktcore/forms/widgets/password.smarty
index 56d56e5..cfb4c04 100644
--- a/templates/ktcore/forms/widgets/password.smarty
+++ b/templates/ktcore/forms/widgets/password.smarty
@@ -1,9 +1,9 @@
-      <input type="password" name="{$name}{if ($context->bConfirm)}[base]{/if}" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value}"{/if}{if ($options.autocomplete === false)}autocomplete="off"{/if}/>
+      <input type="password" name="{$name}{if ($context->bConfirm)}[base]{/if}" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value|sanitize_input}"{/if}{if ($options.autocomplete === false)}autocomplete="off"{/if}/>
 
     {if ($context->bConfirm)}
     <br />    <br />
       <label for="{$name}">{i18n arg_label=$label}Confirm #label#{/i18n}{if ($required === true)}<span class="required">({i18n}Required{/i18n})</span>{/if}</label>
       <p class="descriptiveText">{$context->sConfirmDescription}</p>
-      
-      <input type="password" name="{$name}[confirm]" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value}"{/if}{if ($options.autocomplete === false)}autocomplete="off"{/if}/>  
+
+      <input type="password" name="{$name}[confirm]" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value|sanitize_input}"{/if}{if ($options.autocomplete === false)}autocomplete="off"{/if}/>
     {/if}
--
libgit2 0.21.4