wrap pretty much all freemarker variables (i.e the data) in encodeHTML(data..). this...

[mir.git] / templates-dist / admin / foot.template

diff --git a/templates-dist/admin/foot.template b/templates-dist/admin/foot.template
index 31fb0a4..d0e5a6e 100755 (executable)
--- a/templates-dist/admin/foot.template
+++ b/templates-dist/admin/foot.template
@@ -6,6 +6,6 @@
        <td align="left" bgcolor="#663399"><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">
        <a href="#top"><font color="white"><b>${lang("foot.top")}</b></font></a></font></td>
        <td align="right"><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">
-       <a href="mailto:${lang("imc.contact-email.address")}"><font color="#663399"><b>${lang("imc.shortname")}</b></font></a> - ${config.mirVersion}</font></td>
+       <a href="mailto:${lang("imc.contact-email.address")}"><font color="#663399"><b>${lang("imc.shortname")}</b></font></a> - ${encodeHTML(config.mirVersion)}</font></td>
 </tr>
 </table>