monitoring: Escape event message in an object's event history

2015-01-22 10:45:14 +01:00 · 2015-01-22 10:45:14 +01:00 · d1715c8ec6
parent a1f4d124b4
commit d1715c8ec6
1 changed files with 1 additions and 1 deletions
--- a/modules/monitoring/application/views/scripts/show/history.phtml
+++ b/modules/monitoring/application/views/scripts/show/history.phtml
@ -148,7 +148,7 @@ $output = $this->tickets ? preg_replace_callback(
        <?php endif ?>
          <br>
          <div>
-            <?= $this->icon($icon, $title); ?> <?= empty($msg) ? '' : $msg; ?>
+            <?= $this->icon($icon, $title); ?> <?= empty($msg) ? '' : $this->escape($msg) ?>
          </div>
        </td>
      </tr>