From 5c7b4099e2815089cb7bfe49f6b07158c23a8b2f Mon Sep 17 00:00:00 2001
From: "David T. Sadler" <davidtsadler@googlemail.com>
Date: Tue, 9 Nov 2021 20:34:18 +0000
Subject: Add missing htmlentities

---
 src/templates/form_fields.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'src/templates/form_fields.php')

diff --git a/src/templates/form_fields.php b/src/templates/form_fields.php
index 3005ee8..0bfe076 100644
--- a/src/templates/form_fields.php
+++ b/src/templates/form_fields.php
@@ -1,12 +1,12 @@
 <label>URL<input type="text" name="url" maxlength="512" value="<?php echo htmlspecialchars($old->get('url', $bookmark->url)); ?>" autofocus></label>
 <?php if ($errors->has('url')) { ?>
-    <p><?php echo implode(', ', $errors->get('url')); ?></p>
+    <p><?php echo htmlentities(implode(', ', $errors->get('url'))); ?></p>
 <?php } ?>
 <label>Title<input type="text" name="title" maxlength="256" value="<?php echo htmlspecialchars($old->get('title', $bookmark->title)); ?>"></label>
 <?php if ($errors->has('title')) { ?>
-    <p><?php echo implode(', ', $errors->get('title')); ?></p>
+    <p><?php echo htmlentities(implode(', ', $errors->get('title'))); ?></p>
 <?php } ?>
 <label>Tag<input type="text" name="tag" maxlength="8" value="<?php echo htmlspecialchars($old->get('tag', $bookmark->tag)); ?>"></label>
 <?php if ($errors->has('tag')) { ?>
-    <p><?php echo implode(', ', $errors->get('tag')); ?></p>
+    <p><?php echo htmlentities(implode(', ', $errors->get('tag'))); ?></p>
 <?php } ?>
-- 
cgit v1.2.3-13-gbd6f