HOR-282 Added more output filtering.

2016-03-02 20:36:22 +00:00
parent f093639273
commit 8aa8b5becd
1 changed files with 1 additions and 1 deletions
--- a/workflow/engine/methods/tools/ajaxListener.php
+++ b/workflow/engine/methods/tools/ajaxListener.php
@@ -67,7 +67,7 @@ class Ajax
                $result->msg = $res['message'];
            } else {
                $result->success = true;
-                $result->msg = 'Label ' . $id . ' saved Successfully!';
+                $result->msg = 'Label ' . htmlspecialchars($id) . ' saved Successfully!';
            }
        } catch (Exception $e) {
            $result->success = false;