fix: added missing conversion to HTML entities

thorsten · Apr 2, 2023 · 20ac515 · 20ac515
1 parent fd2cda1
commit 20ac515
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/phpmyfaq/admin/record.questions.php b/phpmyfaq/admin/record.questions.php
@@ -89,12 +89,14 @@
                     <td>
                         <?= $date->format(Date::createIsoDate($openQuestion->getCreated())) ?>
                       <br>
-                      <a href="mailto:<?= $openQuestion->getEmail() ?>">
+                      <a href="mailto:<?= Strings::htmlentities($openQuestion->getEmail()) ?>">
                           <?= Strings::htmlentities($openQuestion->getUsername()) ?>
                       </a>
                     </td>
                     <td>
-                      <strong><?= $category->categoryName[$openQuestion->getCategoryId()]['name'] ?></strong>
+                      <strong>
+                          <?= Strings::htmlentities($category->categoryName[$openQuestion->getCategoryId()]['name']) ?>
+                      </strong>
                       <br>
                         <?= Strings::htmlentities($openQuestion->getQuestion()) ?>
                     </td>