FilterEditor: escape values correctly

refs #12330
2016-12-15 16:27:50 +01:00 · 2016-12-15 16:27:50 +01:00 · 96f0a8c24e
parent 80d3abed9d
commit 96f0a8c24e
1 changed files with 1 additions and 1 deletions
--- a/library/Icinga/Web/Widget/FilterEditor.php
+++ b/library/Icinga/Web/Widget/FilterEditor.php
@ -521,7 +521,7 @@ class FilterEditor extends AbstractWidget
        return sprintf(
            '<input type="text" name="%s" value="%s" />',
            $this->elementId('value', $filter),
-            $value
+            $this->view()->escape($value)
        );
    }