From df3a0848c25646c0b3a8b55e383c47c77e56c1fb Mon Sep 17 00:00:00 2001
From: conradverm <conradverm@c91229c3-7414-0410-bfa2-8a42b809f60b>
Date: Fri, 20 Jul 2007 13:40:32 +0000
Subject: [PATCH] KTS-2178 "cross site scripting" Implemented.

---
 templates/kt3/portlets/search_portlet.smarty | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/kt3/portlets/search_portlet.smarty b/templates/kt3/portlets/search_portlet.smarty
index 0810098..9bb7be4 100644
--- a/templates/kt3/portlets/search_portlet.smarty
+++ b/templates/kt3/portlets/search_portlet.smarty
@@ -9,7 +9,7 @@
 <ul class="actionlist">
 {foreach item=oSearch from=$saved_searches}
 <li>
-{if ($oSearch->getUserId())}<a class="ktInline ktAction ktDelete" href="{"booleanSearch"|generateControllerUrl}&qs[action]=deleteSearch&qs[fSavedSearchId]={$oSearch->getId()}&qs[fFolderId]={$folder_id}&qs[fDocumentId]={$document_id}">{i18n}Delete{/i18n}</a>{/if}<a href="{"booleanSearch"|generateControllerUrl}&qs[action]=performSearch&qs[fSavedSearchId]={$oSearch->getId()}">{$oSearch->getName()}</a>
+{if ($oSearch->getUserId())}<a class="ktInline ktAction ktDelete" href="{"booleanSearch"|generateControllerUrl}&qs[action]=deleteSearch&qs[fSavedSearchId]={$oSearch->getId()}&qs[fFolderId]={$folder_id}&qs[fDocumentId]={$document_id}">{i18n}Delete{/i18n}</a>{/if}<a href="{"booleanSearch"|generateControllerUrl}&qs[action]=performSearch&qs[fSavedSearchId]={$oSearch->getId()}">{$oSearch->getName()|sanitize}</a>
 </li>
 {/foreach}
 </ul>
--
libgit2 0.21.4