Filter search box before display

2018-11-13 17:20:21 -05:00 · 2018-11-13 17:20:21 -05:00 · 35e66770be
commit 35e66770be
parent adf4782076
1 changed files with 1 additions and 1 deletions
--- a/include/text.php
+++ b/include/text.php
@ -1075,7 +1075,7 @@ function micropro($contact, $redirect = false, $class = '', $mode = false) {
 function search($s,$id='search-box',$url='/search',$save = false) {

 	return replace_macros(get_markup_template('searchbox.tpl'),array(
-		'$s' => $s,
+		'$s' => htmlspecialchars($s),
 		'$id' => $id,
 		'$action_url' => z_root() . $url,
 		'$search_label' => t('Search'),