diff options
| author |  Alexandre Alapetite <alexandre@alapetite.fr>
| 2022-06-11 22:14:46 +0200 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2022-06-11 22:14:46 +0200 |
| commit | ec11da4e84c9ef000f05d8ea542e2fb9549d19a1 (patch) | |
| tree | d70bbfdda2af1d74263aa656097cc7e630083883 /app/layout/header.phtml | |
| parent | a398a135f55f0d8d0e16cfbba36bcc94c0c312e6 (diff) | |
Safer htmlspecialchars_utf8 (#4411)
* Safer htmlspecialchars_utf8
#fix https://github.com/FreshRSS/FreshRSS/issues/4410
* Undefined variable
Diffstat (limited to 'app/layout/header.phtml')
| -rw-r--r-- | app/layout/header.phtml | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/app/layout/header.phtml b/app/layout/header.phtml index 94a83894e..21df02788 100644 --- a/app/layout/header.phtml +++ b/app/layout/header.phtml @@ -15,8 +15,9 @@ <?php if (FreshRSS_Auth::hasAccess() || FreshRSS_Context::$system_conf->allow_anonymous) { ?> <form action="<?= _url('index', 'index') ?>" method="get"> <div class="stick"> - <input type="search" name="search" id="search" class="extend" value="<?php - echo htmlspecialchars(htmlspecialchars_decode(FreshRSS_Context::$search, ENT_QUOTES), ENT_COMPAT, 'UTF-8'); ?>" placeholder="<?= _t('gen.menu.search') ?>" /> + <input type="search" name="search" id="search" class="extend" + value="<?= htmlspecialchars(htmlspecialchars_decode(FreshRSS_Context::$search, ENT_QUOTES), ENT_COMPAT, 'UTF-8') ?>" + placeholder="<?= _t('gen.menu.search') ?>" /> <?php $get = Minz_Request::param('get', ''); ?> <?php if ($get != '') { ?> |