Commit 776ae347 authored by Uma's avatar Uma
Browse files

Merge branch 'security_fix' into '7.4.0'

HTML injection fix for compose email popup



See merge request !801
parents 7923ea63 0f5e5bc5
Loading
Loading
Loading
Loading
+1 −1
Original line number Diff line number Diff line
@@ -47,7 +47,7 @@
                            </div>
                            <div class="col-lg-6">
                                {if !empty($TO)}
                                    {assign var=TO_EMAILS value=","|implode:$TO}
                                    {assign var=TO_EMAILS value=","|implode:$TO|htmlentities}
                                {/if}
                                <input id="emailField" style="width:100%" name="toEmail" type="text" class="autoComplete sourceField select2" data-rule-required="true" data-rule-multiEmails="true" value="{$TO_EMAILS}" placeholder="{vtranslate('LBL_TYPE_AND_SEARCH',$MODULE)}">
                            </div>