We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 1f2641a commit f746914Copy full SHA for f746914
source/php/App.php
@@ -117,7 +117,7 @@ public function addHiddenFields($field)
117
}
118
119
$val = is_string($field['value']) ? $field['value'] : '';
120
- echo '<input type="hidden" name="current-' . $field['name'] . '" value="' . $val . '">';
+ echo '<input type="hidden" name="current-' . esc_attr($field['name']) . '" value="' . esc_attr(htmlspecialchars($val, ENT_QUOTES, 'UTF-8')) . '">';
121
122
123
/**
0 commit comments