SuggestController: move escaping to controller

2017-09-17 13:44:52 +02:00 · 2017-09-17 13:44:52 +02:00 · ec23a205c7
parent 1e43ca5d99
commit ec23a205c7
2 changed files with 2 additions and 2 deletions
--- a/application/controllers/SuggestController.php
+++ b/application/controllers/SuggestController.php
@ -44,7 +44,7 @@ class SuggestController extends ActionController
                    $matches[] = $this->highlight($str, $search);
                }
            } else {
-                $matches[] = $str;
+                $matches[] = Util::escapeForHtml($str);
            }
        }

--- a/application/views/scripts/suggest/index.phtml
+++ b/application/views/scripts/suggest/index.phtml
@ -1,3 +1,3 @@
 <?php foreach ($suggestions as $suggest): ?>
-<li><?= $this->escape($suggest) ?></li>
+<li><?= $suggest ?></li>
 <?php endforeach ?>