From 20ac51594db11604a4518aacc28a51f67d4f11bf Mon Sep 17 00:00:00 2001
From: Thorsten Rinne <thorsten@phpmyfaq.de>
Date: Sun, 2 Apr 2023 10:04:31 +0200
Subject: [PATCH] fix: added missing conversion to HTML entities

---
 phpmyfaq/admin/record.questions.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/phpmyfaq/admin/record.questions.php b/phpmyfaq/admin/record.questions.php
index 2e15fd0983..0e8dbfca93 100644
--- a/phpmyfaq/admin/record.questions.php
+++ b/phpmyfaq/admin/record.questions.php
@@ -89,12 +89,14 @@
                     <td>
                         <?= $date->format(Date::createIsoDate($openQuestion->getCreated())) ?>
                       <br>
-                      <a href="mailto:<?= $openQuestion->getEmail() ?>">
+                      <a href="mailto:<?= Strings::htmlentities($openQuestion->getEmail()) ?>">
                           <?= Strings::htmlentities($openQuestion->getUsername()) ?>
                       </a>
                     </td>
                     <td>
-                      <strong><?= $category->categoryName[$openQuestion->getCategoryId()]['name'] ?></strong>
+                      <strong>
+                          <?= Strings::htmlentities($category->categoryName[$openQuestion->getCategoryId()]['name']) ?>
+                      </strong>
                       <br>
                         <?= Strings::htmlentities($openQuestion->getQuestion()) ?>
                     </td>