[Files] Use htmlspecialchars()

14 years ago · 85209287bb
parent 4860d03270
commit 85209287bb
1 changed files with 2 additions and 2 deletions
--- a/apps/files/templates/part.list.php
+++ b/apps/files/templates/part.list.php
@ -34,9 +34,9 @@
 		<?php endif; ?>
 			<span class="nametext">
 				<?php if($file['type'] == 'dir'):?>
-					<?php p($file['name']);?>
+					<?php print_unescaped(htmlspecialchars($file['name']));?>
 				<?php else:?>
-					<?php p($file['basename']);?><span
+					<?php print_unescaped(htmlspecialchars($file['basename']));?><span
 						class='extension'><?php p($file['extension']);?></span>
 				<?php endif;?>
 			</span>