From 876c831cb1d989a067d284bd97fbdbf70e910e02 Mon Sep 17 00:00:00 2001
From: conradverm <conradverm@c91229c3-7414-0410-bfa2-8a42b809f60b>
Date: Fri, 13 Jul 2007 15:18:29 +0000
Subject: [PATCH] KTS-2178 "cross site scripting" Updated.

---
 templates/ktcore/forms/widgets/hidden.smarty | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/ktcore/forms/widgets/hidden.smarty b/templates/ktcore/forms/widgets/hidden.smarty
index bdee3db..a170f56 100644
--- a/templates/ktcore/forms/widgets/hidden.smarty
+++ b/templates/ktcore/forms/widgets/hidden.smarty
@@ -1 +1 @@
-  <input type="hidden" name="{$name}" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value}"{/if}/>
+  <input type="hidden" name="{$name}" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value|sanitize_input}"{/if}/>
--
libgit2 0.21.4