Escape emitted template option HTML.

2013-02-07 16:28:32 +01:00 · 2013-02-07 16:28:32 +01:00 · f26917ad37
commit f26917ad37
parent 2e61009a4c
1 changed files with 1 additions and 1 deletions
--- a/templates/2k11/index.tpl
+++ b/templates/2k11/index.tpl
@ -59,7 +59,7 @@
        </form>
        {serendipity_hookPlugin hook="quicksearch_plugin" hookAll="true"}
        {if $template_option.header_img}
-        <img src="{$template_option.header_img}" alt="">
+        <img src="{$template_option.header_img|@escape:"html"}" alt="">
        {/if}
    </header>
    {if $template_option.use_corenav}