* Finish task #6298.

2019-09-02 14:53:43 +08:00
parent 2840f01585
commit 95aed78ea7
1 changed files with 1 additions and 1 deletions
@@ -85,7 +85,7 @@
                echo "<th class='step-id'>$stepId</th>";
                echo "<td class='text-left'><div class='input-group'>";
                if($step->type == 'item') echo "<span class='step-item-id'>{$stepId}.{$childId}</span>";
-                echo nl2br(str_replace(' ', '&nbsp;', $step->desc)) . "</td>";
+                echo nl2br(str_replace(' ', '&nbsp;', htmlspecialchars($step->desc))) . "</td>";
                echo "<td class='text-left'>" . nl2br(str_replace(' ', '&nbsp;', $step->expect)) . "</div></td>";
                echo "</tr>";
                $childId ++;