diff options
| -rw-r--r-- | src/templates/form_fields.php | 6 | ||||
| -rw-r--r-- | src/templates/index.php | 2 |
2 files changed, 4 insertions, 4 deletions
diff --git a/src/templates/form_fields.php b/src/templates/form_fields.php index 3005ee8..0bfe076 100644 --- a/src/templates/form_fields.php +++ b/src/templates/form_fields.php @@ -1,12 +1,12 @@ <label>URL<input type="text" name="url" maxlength="512" value="<?php echo htmlspecialchars($old->get('url', $bookmark->url)); ?>" autofocus></label> <?php if ($errors->has('url')) { ?> - <p><?php echo implode(', ', $errors->get('url')); ?></p> + <p><?php echo htmlentities(implode(', ', $errors->get('url'))); ?></p> <?php } ?> <label>Title<input type="text" name="title" maxlength="256" value="<?php echo htmlspecialchars($old->get('title', $bookmark->title)); ?>"></label> <?php if ($errors->has('title')) { ?> - <p><?php echo implode(', ', $errors->get('title')); ?></p> + <p><?php echo htmlentities(implode(', ', $errors->get('title'))); ?></p> <?php } ?> <label>Tag<input type="text" name="tag" maxlength="8" value="<?php echo htmlspecialchars($old->get('tag', $bookmark->tag)); ?>"></label> <?php if ($errors->has('tag')) { ?> - <p><?php echo implode(', ', $errors->get('tag')); ?></p> + <p><?php echo htmlentities(implode(', ', $errors->get('tag'))); ?></p> <?php } ?> diff --git a/src/templates/index.php b/src/templates/index.php index 796bc26..f078bbd 100644 --- a/src/templates/index.php +++ b/src/templates/index.php @@ -18,7 +18,7 @@ <ul> <a href="/">All</a> <?php foreach($bookmarks->tags() as $tag) { ?> - <li><a href="/?tag=<?php echo htmlentities($tag); ?>"><?php echo $tag; ?></a></li> + <li><a href="/?tag=<?php echo htmlentities($tag); ?>"><?php echo htmlentities($tag); ?></a></li> <?php } ?> </ul> <h2>Bookmarks</h2> |