From a596b020c43e85b9da3d57a591bbc853c64170c6 Mon Sep 17 00:00:00 2001
From: sparkyx <danydb@noalyss.eu>
Date: Fri, 9 Aug 2024 14:02:53 +0200
Subject: [PATCH] HtmlInput::get_node_attribute protect the attribute with
 htmlentity

---
 include/lib/html_input.class.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/include/lib/html_input.class.php b/include/lib/html_input.class.php
index 7fc047a50..4a5174bc4 100755
--- a/include/lib/html_input.class.php
+++ b/include/lib/html_input.class.php
@@ -1210,7 +1210,7 @@ class HtmlInput
         for ($i=0; $i<$nb_attribute; $i++)
         {
             $r.=sprintf(' %s="%s" ', $this->attribute[$i][0],
-                    $this->attribute[$i][1]);
+                    htmlentities($this->attribute[$i][1]));
         }
         return $r;
     }