// Fix xss

git-svn-id: http://dev.prestashop.com/svn/v1/branches/1.5.x@11387 b9a71923-0436-4b27-9f14-aed3839534dd
2011-12-19 17:47:24 +00:00
parent bb28baec68
commit 5efc077d8d
1 changed files with 3 additions and 2 deletions
@@ -50,7 +50,8 @@
 			{foreach from=$shop_details['zones'] key=id_zone item=currentZone}
 				<label>{$currentZone['name']}</label>
 				<div class="margin-form">
-					<input type="text" name="zone_{$id_zone}" value="{$currentZone['account_number']}" />
+					<input type="text" name="zone_{$id_zone}" value="{$currentZone['account_number']|escape:htmlall}" />
+
 				</div>
 			{/foreach}
 			<div class="margin-form">
@@ -59,4 +60,4 @@
 		</form>
 		<div class="separation"></div>
 	</fieldset>
-{/if}
+{/if}