fix trivial xss in reply form

1 files changed, 2 insertions, 2 deletions

diff --git a/templates/note/reply_form.php b/templates/note/reply_form.php
index 388b243..1f84133 100644
--- a/templates/note/reply_form.php
+++ b/templates/note/reply_form.php
@@ -31,7 +31,7 @@ $selectedScope = $note->privacy->scope->value;
     <div class="row summaryAndContent">
         <label for="replyContent-<?= $note->id ?>"><?= __('writeReply.label') ?></label>
         <input type="text" id="replySummary-<?= $note->id ?>" name="summary" autocomplete="off"
-            value="<?= $summaryText ?>" placeholder="<?= __('writeNote.summary.label') ?>">
+            value="<?= htmlspecialchars($summaryText) ?>" placeholder="<?= __('writeNote.summary.label') ?>">
         <textarea id="replyContent-<?= $note->id ?>" name="content" required autocomplete="off"
             placeholder="<?= __('writeReply.placeholder') ?>"
             _="on keydown[ctrlKey and key is 'Enter'] set b to #replySubmitButton-<?= $note->id ?> then b.click()"></textarea>
@@ -62,4 +62,4 @@ $selectedScope = $note->privacy->scope->value;
     <div class="row">
         <button class="primary" id="replySubmitButton-<?= $note->id ?>"><?= __('writeReply.action') ?></button>
     </div>
-</form>
\ No newline at end of file
+</form>