From 558959d4d7dcceff000fd5861f2f46451ebbd8a9 Mon Sep 17 00:00:00 2001
From: "David T. Sadler" <davidtsadler@googlemail.com>
Date: Mon, 1 Nov 2021 21:24:31 +0000
Subject: Ensure html is escaped

---
 src/templates/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/templates/index.php')

diff --git a/src/templates/index.php b/src/templates/index.php
index d246605..4f76614 100644
--- a/src/templates/index.php
+++ b/src/templates/index.php
@@ -12,7 +12,7 @@
         <a href="/create">Add</a>
         <ul>
             <?php foreach ($bookmarks as $bookmark) { ?>
-                <li><a href="<?php echo $bookmark->url; ?>"><?php echo $bookmark->title != '' ? $bookmark->title : $bookmark->url; ?></a> <a href="/edit?id=<?php echo $bookmark->id; ?>">Edit</a> | <a href="/delete/confirm?id=<?php echo $bookmark->id; ?>">Delete</a></li>
+                <li><a href="<?php echo htmlentities($bookmark->url); ?>"><?php echo $bookmark->title != '' ? htmlentities($bookmark->title) : htmlentities($bookmark->url); ?></a> <a href="/edit?id=<?php echo $bookmark->id; ?>">Edit</a> | <a href="/delete/confirm?id=<?php echo $bookmark->id; ?>">Delete</a></li>
             <?php } ?>
         </ul>
     </body>
-- 
cgit v1.2.3-13-gbd6f