From 8fbd2c209e345761f915b027d34b0e99acb85589 Mon Sep 17 00:00:00 2001
From: Remigijus Kiminas <remdex@gmail.com>
Date: Mon, 27 Dec 2021 02:25:43 -0500
Subject: [PATCH] Escape

---
 design/fbmessengertheme/tpl/lhfbmessenger/bbcode.tpl.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/design/fbmessengertheme/tpl/lhfbmessenger/bbcode.tpl.php b/design/fbmessengertheme/tpl/lhfbmessenger/bbcode.tpl.php
index 4fbd52d..2c6c2e4 100644
--- a/design/fbmessengertheme/tpl/lhfbmessenger/bbcode.tpl.php
+++ b/design/fbmessengertheme/tpl/lhfbmessenger/bbcode.tpl.php
@@ -12,8 +12,8 @@
     </thead>
     <?php foreach ($items as $item) : ?>
         <tr>
-            <td><?php echo $item->name?></td>
-            <td>[<?php echo $item->bbcode?>]</td>
+            <td><?php echo htmlspecialchars($item->name)?></td>
+            <td>[<?php echo htmlspecialchars($item->bbcode)?>]</td>
             <td nowrap>
                 <div class="btn-group" role="group" aria-label="..." style="width:60px;">
                     <a class="btn btn-secondary btn-xs" href="<?php echo erLhcoreClassDesign::baseurl('fbmessenger/editbbcode')?>/<?php echo $item->id?>" ><i class="material-icons mr-0">&#xE254;</i></a>