From e08dbf80dc1e9e571a4f827acca7715703955366 Mon Sep 17 00:00:00 2001 From: ideaship <ideaship@users.noreply.github.com> Date: Thu, 6 Mar 2014 16:03:00 +0100 Subject: [PATCH] fix: use print_escaped for radio button "checked" use of p() results in escaped HTML code: checked="checked" where it should be: checked="checked" --- core/templates/installation.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/templates/installation.php b/core/templates/installation.php index e2d296a713..709207e797 100644 --- a/core/templates/installation.php +++ b/core/templates/installation.php @@ -95,7 +95,7 @@ <input type="hidden" id="dbtype" name="dbtype" value="<?php p($type) ?>" /> <?php else: ?> <input type="radio" name="dbtype" value="<?php p($type) ?>" id="<?php p($type) ?>" - <?php p($_['dbtype'] === $type ? 'checked="checked" ' : '') ?>/> + <?php print_unescaped($_['dbtype'] === $type ? 'checked="checked" ' : '') ?>/> <label class="<?php p($type) ?>" for="<?php p($type) ?>"><?php p($label) ?></label> <?php endif; ?> <?php endforeach; ?> -- GitLab