Fix stored xss issue.

bigprof-software · Jul 3, 2021 · 953bb27 · 953bb27
1 parent 8555d61
commit 953bb27
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/hooks/SummaryReport.php b/app/hooks/SummaryReport.php
@@ -835,7 +835,7 @@ private function section_data_table() {
 						?>
 						<tr>
 							<td class="text-right hidden row-number"><?php echo ++$row_number; ?></th>		
-							<td class="text-left item-label"><?php echo $item['label']; ?></td>
+							<td class="text-left item-label"><?php echo safe_html($item['label']); ?></td>
 
 							<td class="text-right item-value"><?php echo $value1; ?></td>
 							<?php if(isset($this->date_field)) { ?>