From 85e6b250cf4674df9afe8e3575f4e288e55bd1b7 Mon Sep 17 00:00:00 2001
From: conradverm <conradverm@c91229c3-7414-0410-bfa2-8a42b809f60b>
Date: Mon, 23 Jul 2007 10:15:52 +0000
Subject: [PATCH] KTS-2178 "cross site scripting" Implemented.

---
 templates/ktcore/folder/view_permissions.smarty | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/ktcore/folder/view_permissions.smarty b/templates/ktcore/folder/view_permissions.smarty
index 33856cc..fc5ba2d 100644
--- a/templates/ktcore/folder/view_permissions.smarty
+++ b/templates/ktcore/folder/view_permissions.smarty
@@ -16,7 +16,7 @@ assigned are shown.{/i18n}</p>
 <p>
 <div class="ktInfoMessage">
 { if $inherited }
-<span>{i18n arg_permission_source=$inherited}This folder <strong>inherits</strong> its permissions from #permission_source#.{/i18n}
+<span>{i18n arg_permission_source=$inherited|sanitize}This folder <strong>inherits</strong> its permissions from #permission_source#.{/i18n}
 {if $inheritable}
 <a class="ktActionLink ktDelete"
    kt:deleteMessage="{i18n}Are you sure you wish to override the permissions?{/i18n}"
--
libgit2 0.21.4