fixed missing escaping of textarea data

diff --git a/templates/admin/fileedit.template b/templates/admin/fileedit.template
index 601c83d..75f57a9 100755 (executable)
--- a/templates/admin/fileedit.template
+++ b/templates/admin/fileedit.template
@@ -21,7 +21,7 @@
         <input type="hidden" name="do" value="update">
 
 
-        <textarea cols="120" rows="40" name="text" wrap=virtual>${text}</textarea>
+        <textarea cols="120" rows="40" name="text" wrap=virtual>${utility.encodeHTML(text)}</textarea>
 
 <br>