fix: htmlspecialchars in AUP template

CESNET · Sep 15, 2022 · 2581915 · 2581915
1 parent de24343
commit 2581915
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/force-aup-tpl.php b/templates/force-aup-tpl.php
@@ -31,7 +31,7 @@
         }
 ?>
 
-        <input type="hidden" name="StateId" value="<?php echo $_REQUEST['StateId']; ?>">
+        <input type="hidden" name="StateId" value="<?php echo htmlspecialchars($_REQUEST['StateId']); ?>">
 
         <div class="form-group">
             <button type="submit" class="btn btn-lg btn-primary btn-block">