From 627af2c236bf4a370a5d31641757b69d679513f6 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <noreply@fakecake.org>
Date: Tue, 16 Feb 2021 15:36:40 +0300
Subject: amend previous to fix actual underlying problem (double escaping)

---
 include/controls.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'include/controls.php')

diff --git a/include/controls.php b/include/controls.php
index 6d3cfc417..b351a9449 100755
--- a/include/controls.php
+++ b/include/controls.php
@@ -61,7 +61,7 @@
 
    function hidden_tag(string $name, string $value) {
       return "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\"
-         name=\"".htmlspecialchars($name)."\" value=\"$value\">";
+         name=\"".htmlspecialchars($name)."\" value=\"".htmlspecialchars($value)."\">";
    }
 
    function checkbox_tag(string $name, bool $checked = false, string $value = "", string $attributes = "", string $id = "") {
-- 
cgit v1.2.3-54-g00ecf