From 044f066c1c9f08ab41c93e1f065053ad22e4959e Mon Sep 17 00:00:00 2001
From: Alexandre Alapetite <alexandre@alapetite.fr>
Date: Thu, 11 Dec 2025 18:18:22 +0100
Subject: Fix htmlspecialchars for search (#8306)

Regression from https://github.com/FreshRSS/FreshRSS/pull/8293
---
 app/layout/header.phtml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'app/layout')

diff --git a/app/layout/header.phtml b/app/layout/header.phtml
index 5c6ea63a4..73dfb3119 100644
--- a/app/layout/header.phtml
+++ b/app/layout/header.phtml
@@ -40,7 +40,7 @@
 			<?php } ?>
 			<div class="stick">
 				<input type="search" name="search" id="search"
-					value="<?= FreshRSS_Context::$search->__toString() ?>"
+					value="<?= htmlspecialchars(FreshRSS_Context::$search->__toString(), ENT_COMPAT, 'UTF-8') ?>"
 					placeholder="<?= _t('gen.menu.search') ?>" />
 				<button class="btn" type="submit"><?= _i('search') ?></button>
 			</div>
-- 
cgit v1.2.3