Item13331: Missed encoding entities

And need to update the manifest.
foswiki · Apr 18, 2015 · 6c4b40e · 6c4b40e
1 parent 203b59d
commit 6c4b40e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/core/lib/Foswiki/Contrib/core/MANIFEST b/core/lib/Foswiki/Contrib/core/MANIFEST
@@ -896,6 +896,7 @@ templates/edittext.tmpl 0444
 templates/form.tmpl 0444
 templates/formtables.tmpl 0444
 templates/foswiki.tmpl 0444
+templates/html.tmpl 0444
 templates/itemview.tmpl 0444
 templates/login.sudo.tmpl 0444
 templates/login.tmpl 0444

diff --git a/core/lib/Foswiki/Render/HTML.pm b/core/lib/Foswiki/Render/HTML.pm
@@ -73,6 +73,7 @@ sub textfield {
     $session->templates->readTemplate('html');
     my $tmpl = $session->templates->expandTemplate('textfield');
 
+    $text = Foswiki::entityEncode($value);
     $tmpl =~ s/%CLASS%/$class/;
     $tmpl =~ s/%DISABLED%/$disabled/;
     $tmpl =~ s/%ID%/$id/;