From d145d6055bb13d535eaf0ac5adb1c77b3bb6d424 Mon Sep 17 00:00:00 2001
From: Florent Bruneau <florent.bruneau@polytechnique.org>
Date: Wed, 23 Jun 2010 17:28:54 +0200
Subject: [PATCH] Missing html escaping in addresses (Closes #1135)

Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
---
 plugins/function.display_address.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/function.display_address.php b/plugins/function.display_address.php
index 32cf19c..55c1f16 100644
--- a/plugins/function.display_address.php
+++ b/plugins/function.display_address.php
@@ -85,7 +85,7 @@ function smarty_function_display_address($param, &$smarty)
     }
     foreach ($lines as $line)
     {
-        $txthtml .= "<strong>".$line."</strong><br/>\n";
+        $txthtml .= "<strong>" . pl_entities($line) . "</strong><br/>\n";
     }
     if($adr->phones() != null) {
         require_once('function.display_phones.php');
-- 
2.1.4