Apply HTML escaping to "loc" command

2019-12-09 16:28:16 +01:00
parent 1611b12352
commit eefdabb714
1 changed files with 4 additions and 2 deletions
@@ -27130,8 +27130,10 @@ void interprete(char *lbook, char *path)
   /* check for localization command */
   if (stricmp(command, "loc") == 0) {
      show_http_header(NULL, FALSE, NULL);
-      if (isparam("value") && *getparam("value"))
-         rsputs(loc(getparam("value")));
+      if (isparam("value") && *getparam("value")) {
+         strencode2(str, getparam("value"), sizeof(str));
+         rsputs(loc(str));
+      }

      /* dummy strings for JS-only translations */
      s = loc("Drop attachments here...");