SuggestController: move escaping to controller

This commit is contained in:
Thomas Gelf 2017-09-17 13:44:52 +02:00
parent 1e43ca5d99
commit ec23a205c7
2 changed files with 2 additions and 2 deletions

View File

@ -44,7 +44,7 @@ class SuggestController extends ActionController
$matches[] = $this->highlight($str, $search); $matches[] = $this->highlight($str, $search);
} }
} else { } else {
$matches[] = $str; $matches[] = Util::escapeForHtml($str);
} }
} }

View File

@ -1,3 +1,3 @@
<?php foreach ($suggestions as $suggest): ?> <?php foreach ($suggestions as $suggest): ?>
<li><?= $this->escape($suggest) ?></li> <li><?= $suggest ?></li>
<?php endforeach ?> <?php endforeach ?>