From 8388d25f0b11878df532901450a2989e53e05746 Mon Sep 17 00:00:00 2001
From: Dominic Szablewski <mail@phoboslab.org>
Date: Thu, 5 Sep 2013 16:07:54 +0200
Subject: [PATCH] Fixed XSS in new comment listing.

---
 picturelicious/comments.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/picturelicious/comments.php b/picturelicious/comments.php
index d715f3e..bfa6e09 100644
--- a/picturelicious/comments.php
+++ b/picturelicious/comments.php
@@ -41,7 +41,7 @@ include( 'templates/header.tpl.php' );
 					</div>
 				<?php } ?>
 			</div>
-			<?php echo $c['content']; ?>
+			<?php echo htmlspecialchars($c['content']); ?>
 		</div>
 	<?php } ?>
 </div>