From 258191552c30ada4c64fa140f5d31d5592592689 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pavel=20B=C5=99ou=C5=A1ek?=
 <melanger@users.noreply.github.com>
Date: Thu, 15 Sep 2022 15:37:37 +0200
Subject: [PATCH] fix: htmlspecialchars in AUP template

---
 templates/force-aup-tpl.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/force-aup-tpl.php b/templates/force-aup-tpl.php
index fd35ae06..e15dfafd 100644
--- a/templates/force-aup-tpl.php
+++ b/templates/force-aup-tpl.php
@@ -31,7 +31,7 @@
         }
 ?>
 
-        <input type="hidden" name="StateId" value="<?php echo $_REQUEST['StateId']; ?>">
+        <input type="hidden" name="StateId" value="<?php echo htmlspecialchars($_REQUEST['StateId']); ?>">
 
         <div class="form-group">
             <button type="submit" class="btn btn-lg btn-primary btn-block">