- <input type="hidden" name="where" value="${data.where}">
- <input type="hidden" name="offset" value="${data.offset}">
- <input type="hidden" name="order" value="${data.order}">
- <input type="hidden" name="id" value="${data.id}">
- <input type="hidden" name="date" value="${data.date}">
- <input type="hidden" name="to_media" value="${data.to_media}">
+ <input type="hidden" name="where" value="${utility.encodeHTML(data.where)}">
+ <input type="hidden" name="offset" value="${utility.encodeHTML(data.offset)}">
+ <input type="hidden" name="order" value="${utility.encodeHTML(data.order)}">
+ <input type="hidden" name="id" value="${utility.encodeHTML(data.id)}">
+ <input type="hidden" name="date" value="${utility.encodeHTML(data.date)}">
+ <input type="hidden" name="to_media" value="${utility.encodeHTML(data.to_media)}">