Update _filter_advanced.tt

Prevent XSS attack by sanitizing the content of the textbox.
sni · Jul 1, 2024 · d843603 · d843603
1 parent faabeca
commit d843603
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/_filter_advanced.tt b/templates/_filter_advanced.tt
@@ -5,4 +5,4 @@ rows="5"
 wrap="hard"
 name="[% paneprefix %]q"[% DEFAULT disabled = 0; IF disabled %] disabled[% END %]
 onfocus="initAutoCompleteQuery(this, queryCodeCompletions)"
->[% content %]</textarea>
+>[% content | html %]</textarea>