From e1969b1ed06414e0c9f0823d263881fd1cc37f4f Mon Sep 17 00:00:00 2001
From: Conrad Vermeulen <conrad@knowledgetree.com>
Date: Thu, 19 Jul 2007 11:01:49 +0000
Subject: [PATCH] KTS-2178 "cross site scripting" Implemented.

---
 templates/kt3/browse.smarty | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/kt3/browse.smarty b/templates/kt3/browse.smarty
index 7819bf9..b420c09 100644
--- a/templates/kt3/browse.smarty
+++ b/templates/kt3/browse.smarty
@@ -44,7 +44,7 @@
   <input type="hidden" name="sListCode" value="{$code}" />
   <input type="hidden" name="action" value="bulkaction" />
   <input type="hidden" name="fReturnAction" value="{$returnaction}" />
-  <input type="hidden" name="fReturnData" value="{$returndata}" />
+  <input type="hidden" name="fReturnData" value="{$returndata|sanitize}" />
 
   {foreach from=$bulkactions item=bulkaction}
       <input type="submit" name="submit[{$bulkaction->getName()}]" value="{$bulkaction->getDisplayName()}" />
--
libgit2 0.21.4