Bug 16599: Fix other potentials XSS for shelfname

[koha.git] / koha-tmpl / opac-tmpl / bootstrap / en / modules / opac-shelves-rss.tt

diff --git a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves-rss.tt b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves-rss.tt
index 2525d80..5e01834 100644 (file)
--- a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves-rss.tt
+++ b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves-rss.tt
@@ -3,7 +3,7 @@
 <rss version="2.0">
 
 <channel>
- <title>[% shelf.shelfname %]</title>
+ <title>[% shelf.shelfname | html %]</title>
  <link>[% OPACBaseURL %]/cgi-bin/koha/opac-shelves.pl?rss=1&amp;viewshelf=[% shelf.shelfnumber %]</link>
  <description>RSS feed for public list [% shelf.shelfname | html %]</description>