From e125ecc1c74c45e45a6d188892db1cca803f9602 Mon Sep 17 00:00:00 2001
From: Marcin Kurczewski <mkurczew@gmail.com>
Date: Sun, 13 Oct 2013 21:05:20 +0200
Subject: [PATCH] Fixed HTML injection

---
 src/Views/layout-normal.phtml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Views/layout-normal.phtml b/src/Views/layout-normal.phtml
index 18febca9..49c96d2f 100644
--- a/src/Views/layout-normal.phtml
+++ b/src/Views/layout-normal.phtml
@@ -64,7 +64,7 @@
 					?>
 					<li>
 						<form name="search" action="<?php echo \Chibi\UrlHelper::route('post', 'list') ?>" method="get">
-							<input type="search" name="query" placeholder="Search&hellip;" value="<?php echo isset($this->context->transport->searchQuery) ? $this->context->transport->searchQuery : '' ?>">
+							<input type="search" name="query" placeholder="Search&hellip;" value="<?php echo isset($this->context->transport->searchQuery) ? htmlspecialchars($this->context->transport->searchQuery) : '' ?>">
 						</form>
 					</li>
 				</ul>