fix security issue in admin

coto · Jan 27, 2014 · e58e07f · e58e07f
1 parent 0c77e5b
commit e58e07f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/bp_admin/templates/admin_users_list.html b/bp_admin/templates/admin_users_list.html
@@ -9,7 +9,7 @@
   <div class="navbar-inner">
     <form method="GET" class="navbar-search">
         <span class="badge"> {{ count }}&nbsp</span>
-        <input type="text" name="q" value="{{ q or '' }}" class="input-medium search-query" placeholder="{{ _('Search User') }}" />
+        <input type="text" name="q" value="{{ q|e }}" class="input-medium search-query" placeholder="{{ _('Search User') }}" />
         <button type="submit" title="Search"><i class="icon-search"></i></button>
         {% if q %}
         <a href="{{ uri_for('admin-users-list') }}" class="clear">×</a>