From 1689ea34a25f4db15f942a8b6484a6f437917251 Mon Sep 17 00:00:00 2001
From: Malishev Dmitry <dima.malishev@gmail.com>
Date: Mon, 28 Dec 2015 15:23:53 +0100
Subject: [PATCH] added html tags escaping

---
 web/edit/file/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/edit/file/index.php b/web/edit/file/index.php
index 6f7474c9..d6ae8dce 100644
--- a/web/edit/file/index.php
+++ b/web/edit/file/index.php
@@ -74,7 +74,7 @@ if (($_SESSION['user'] == 'admin') && (!empty($_SESSION['look']))) {
 <input type="submit" name="save" value="Save" class="save" />
 
 
-<textarea name="contents" class="editor" id="editor" rows="4" style="display:none;width: 100%; height: 100%;"><?php echo $content ?></textarea>
+<textarea name="contents" class="editor" id="editor" rows="4" style="display:none;width: 100%; height: 100%;"><?=htmlentities($content)?></textarea>
 
 </form>