Merge pull request #1492 from fukuchi/improve-views

Sanitize the item's description in browse view.
omeka · Jan 9, 2020 · f1cf1cf · f1cf1cf
2 parents 03b8965 + f63edb2
commit f1cf1cf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/application/view/omeka/site/item/browse.phtml b/application/view/omeka/site/item/browse.phtml
@@ -62,7 +62,7 @@ foreach ($items as $item):
         <?php echo $item->linkRaw($this->thumbnail($item, 'medium')); ?>
         <h4><?php echo $item->link($heading); ?></h4>
         <?php if ($body): ?>
-        <div class="description"><?php echo $body; ?></div>
+        <div class="description"><?php echo $escape($body); ?></div>
         <?php endif; ?>
     </li>
 <?php endforeach; ?>