From b5142910b420cdee5c3ea4cf479fa7d6182c5f0b Mon Sep 17 00:00:00 2001
From: Dennis Eichhorn <spl1nes.com@googlemail.com>
Date: Mon, 24 Jul 2017 20:48:22 +0200
Subject: [PATCH] Add html escaping

---
 Theme/Backend/account-list.tpl.php          |  6 +-
 Theme/Backend/entries.tpl.php               | 86 ++++++++++-----------
 Theme/Backend/gl-create.tpl.php             | 10 +--
 Theme/Backend/gl-list.tpl.php               | 14 ++--
 Theme/Backend/journal-list.tpl.php          | 14 ++--
 Theme/Backend/stack-archive-list.tpl.php    | 18 ++---
 Theme/Backend/stack-create.tpl.php          | 14 ++--
 Theme/Backend/stack-list.tpl.php            | 18 ++---
 Theme/Backend/stack-predefined-list.tpl.php | 20 ++---
 9 files changed, 100 insertions(+), 100 deletions(-)

diff --git a/Theme/Backend/account-list.tpl.php b/Theme/Backend/account-list.tpl.php
index 037a973..efa0fd1 100644
--- a/Theme/Backend/account-list.tpl.php
+++ b/Theme/Backend/account-list.tpl.php
@@ -1,11 +1,11 @@
 <template id="entry-list-tpl">
     <div id="entry-list" class="box" style="z-index: 99; position: relative; top: 20px; display: block; margin: 0 auto; width: 20%;">
         <table class="table red">
-            <caption><?= $this->getText('Accounts'); ?></caption>
+            <caption><?= $this->getHtml('Accounts') ?></caption>
             <thead>
             <tr>
-                <td><?= $this->getText('ID', 0, 0); ?>
-                <td class="wf-100"><?= $this->getText('Account'); ?>
+                <td><?= $this->getHtml('ID', 0, 0); ?>
+                <td class="wf-100"><?= $this->getHtml('Account') ?>
             <tbody>
         </table>
     </div>
diff --git a/Theme/Backend/entries.tpl.php b/Theme/Backend/entries.tpl.php
index 4cb8897..bb6ca93 100644
--- a/Theme/Backend/entries.tpl.php
+++ b/Theme/Backend/entries.tpl.php
@@ -29,10 +29,10 @@ $footerView->setResults(1);
                 <form>
                     <table class="layout wf-100">
                         <tr>
-                            <td><label for="iAccountStart"><?= $this->getText('Account'); ?></label>
-                            <td><label for="iAccountStart"><?= $this->getText('CostCenter'); ?>
-                            <td><label for="iAccountStart"><?= $this->getText('CostObject'); ?>
-                            <td><label for="iAccountStart"><?= $this->getText('EntryDate'); ?>
+                            <td><label for="iAccountStart"><?= $this->getHtml('Account') ?></label>
+                            <td><label for="iAccountStart"><?= $this->getHtml('CostCenter') ?>
+                            <td><label for="iAccountStart"><?= $this->getHtml('CostObject') ?>
+                            <td><label for="iAccountStart"><?= $this->getHtml('EntryDate') ?>
                         <tr>
                             <td><span class="input"><button type="button" id="account-start" formaction="" data-action='[{"type": "popup", "tpl": "entry-list-tpl", "aniIn": "fadeIn", "aniOut": "fadeOut", "stay": 1000}]'><i class="fa fa-book"></i>
                                     </button><input type="number" id="iId" min="1" name="id" required></span>
@@ -42,10 +42,10 @@ $footerView->setResults(1);
                                     </button><input type="number" id="iId" min="1" name="id" required></span>
                             <td><input type="datetime-local" id="iId" min="1" name="id" required>
                         <tr>
-                            <td><label for="iAccountStart"><?= $this->getText('To'); ?></label>
-                            <td><label for="iAccountStart"><?= $this->getText('To'); ?>
-                            <td><label for="iAccountStart"><?= $this->getText('To'); ?>
-                            <td><label for="iAccountStart"><?= $this->getText('To'); ?>
+                            <td><label for="iAccountStart"><?= $this->getHtml('To') ?></label>
+                            <td><label for="iAccountStart"><?= $this->getHtml('To') ?>
+                            <td><label for="iAccountStart"><?= $this->getHtml('To') ?>
+                            <td><label for="iAccountStart"><?= $this->getHtml('To') ?>
                         <tr>
                             <td><span class="input"><button type="button" formaction=""><i class="fa fa-book"></i>
                                     </button><input type="number" id="iId" min="1" name="id" required></span>
@@ -55,7 +55,7 @@ $footerView->setResults(1);
                                     </button><input type="number" id="iId" min="1" name="id" required></span>
                             <td><input type="datetime-local" id="iId" min="1" name="id" required>
                         <tr>
-                            <td colspan="4"><input type="submit" value="<?= $this->getText('Search') ?>">
+                            <td colspan="4"><input type="submit" value="<?= $this->getHtml('Search'); ?>">
                     </table>
                 </form>
             </div>
@@ -66,9 +66,9 @@ $footerView->setResults(1);
 <div class="box w-100">
     <div class="tabular-2">
         <ul class="tab-links">
-            <li><label for="c-tab2-1"><?= $this->getText('List'); ?></label></li>
-            <li><label for="c-tab2-2"><?= $this->getText('Evaluation'); ?></label></li>
-            <li><label for="c-tab2-3"><?= $this->getText('Charts'); ?></label></li>
+            <li><label for="c-tab2-1"><?= $this->getHtml('List') ?></label></li>
+            <li><label for="c-tab2-2"><?= $this->getHtml('Evaluation') ?></label></li>
+            <li><label for="c-tab2-3"><?= $this->getHtml('Charts') ?></label></li>
         </ul>
         <div class="tab-content">
             <input type="radio" id="c-tab2-1" name="tabular-2" checked>
@@ -77,32 +77,32 @@ $footerView->setResults(1);
                     <div class="col-xs-12">
                         <section class="wf-100">
                             <table class="table red">
-                                <caption><?= $this->getText('Entries') ?></caption>
+                                <caption><?= $this->getHtml('Entries'); ?></caption>
                                 <thead>
                                 <tr>
-                                    <td><?= $this->getText('EntryDate'); ?>
-                                    <td><?= $this->getText('Receipt'); ?>
-                                    <td><?= $this->getText('Debit'); ?>
-                                    <td><?= $this->getText('Credit'); ?>
-                                    <td class="wf-100"><?= $this->getText('Text'); ?>
-                                    <td><?= $this->getText('Account'); ?>
-                                    <td><?= $this->getText('ContraAccount'); ?>
-                                    <td><?= $this->getText('CostCenter'); ?>
-                                    <td><?= $this->getText('CostObject'); ?>
-                                    <td><?= $this->getText('ReceiptDate'); ?>
-                                    <td><?= $this->getText('ExternalVoucher'); ?>
-                                    <td><?= $this->getText('Creator'); ?>
-                                    <td><?= $this->getText('Created'); ?>
+                                    <td><?= $this->getHtml('EntryDate') ?>
+                                    <td><?= $this->getHtml('Receipt') ?>
+                                    <td><?= $this->getHtml('Debit') ?>
+                                    <td><?= $this->getHtml('Credit') ?>
+                                    <td class="wf-100"><?= $this->getHtml('Text') ?>
+                                    <td><?= $this->getHtml('Account') ?>
+                                    <td><?= $this->getHtml('ContraAccount') ?>
+                                    <td><?= $this->getHtml('CostCenter') ?>
+                                    <td><?= $this->getHtml('CostObject') ?>
+                                    <td><?= $this->getHtml('ReceiptDate') ?>
+                                    <td><?= $this->getHtml('ExternalVoucher') ?>
+                                    <td><?= $this->getHtml('Creator') ?>
+                                    <td><?= $this->getHtml('Created') ?>
                                 <tfoot>
                                 <tr>
-                                    <td colspan="13"><?= $footerView->render(); ?>
+                                    <td colspan="13"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
                                 <tbody>
                                 <?php $count = 0;
                                 foreach ([] as $key => $value) : $count++; ?>
                                 <?php endforeach; ?>
                                 <?php if ($count === 0) : ?>
                                 <tr>
-                                    <td colspan="13" class="empty"><?= $this->getText('Empty', 0, 0); ?>
+                                    <td colspan="13" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
                                         <?php endif; ?>
                             </table>
                         </section>
@@ -115,19 +115,19 @@ $footerView->setResults(1);
                     <div class="col-xs-4">
                         <section class="wf-100">
                             <table class="table red">
-                                <caption><?= $this->getText('Accounts') ?></caption>
+                                <caption><?= $this->getHtml('Accounts'); ?></caption>
                                 <thead>
                                 <tr>
-                                    <td><?= $this->getText('Account'); ?>
-                                    <td class="wf-100"><?= $this->getText('Name'); ?>
-                                    <td><?= $this->getText('Total'); ?>
+                                    <td><?= $this->getHtml('Account') ?>
+                                    <td class="wf-100"><?= $this->getHtml('Name') ?>
+                                    <td><?= $this->getHtml('Total') ?>
                                 <tbody>
                                 <?php $count = 0;
                                 foreach ([] as $key => $value) : $count++; ?>
                                 <?php endforeach; ?>
                                 <?php if ($count === 0) : ?>
                                 <tr>
-                                    <td colspan="13" class="empty"><?= $this->getText('Empty', 0, 0); ?>
+                                    <td colspan="13" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
                                         <?php endif; ?>
                             </table>
                         </section>
@@ -135,19 +135,19 @@ $footerView->setResults(1);
                     <div class="col-xs-4">
                         <section class="wf-100">
                             <table class="table green">
-                                <caption><?= $this->getText('CostCenter') ?></caption>
+                                <caption><?= $this->getHtml('CostCenter'); ?></caption>
                                 <thead>
                                 <tr>
-                                    <td><?= $this->getText('CostCenter'); ?>
-                                    <td class="wf-100"><?= $this->getText('Name'); ?>
-                                    <td><?= $this->getText('Total'); ?>
+                                    <td><?= $this->getHtml('CostCenter') ?>
+                                    <td class="wf-100"><?= $this->getHtml('Name') ?>
+                                    <td><?= $this->getHtml('Total') ?>
                                 <tbody>
                                 <?php $count = 0;
                                 foreach ([] as $key => $value) : $count++; ?>
                                 <?php endforeach; ?>
                                 <?php if ($count === 0) : ?>
                                 <tr>
-                                    <td colspan="13" class="empty"><?= $this->getText('Empty', 0, 0); ?>
+                                    <td colspan="13" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
                                         <?php endif; ?>
                             </table>
                         </section>
@@ -155,19 +155,19 @@ $footerView->setResults(1);
                     <div class="col-xs-4">
                         <section class="wf-100">
                             <table class="table blue">
-                                <caption><?= $this->getText('CostObject') ?></caption>
+                                <caption><?= $this->getHtml('CostObject'); ?></caption>
                                 <thead>
                                 <tr>
-                                    <td><?= $this->getText('Account'); ?>
-                                    <td class="wf-100"><?= $this->getText('Name'); ?>
-                                    <td><?= $this->getText('Total'); ?>
+                                    <td><?= $this->getHtml('Account') ?>
+                                    <td class="wf-100"><?= $this->getHtml('Name') ?>
+                                    <td><?= $this->getHtml('Total') ?>
                                 <tbody>
                                 <?php $count = 0;
                                 foreach ([] as $key => $value) : $count++; ?>
                                 <?php endforeach; ?>
                                 <?php if ($count === 0) : ?>
                                 <tr>
-                                    <td colspan="13" class="empty"><?= $this->getText('Empty', 0, 0); ?>
+                                    <td colspan="13" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
                                         <?php endif; ?>
                             </table>
                         </section>
diff --git a/Theme/Backend/gl-create.tpl.php b/Theme/Backend/gl-create.tpl.php
index aad4754..0b64a29 100644
--- a/Theme/Backend/gl-create.tpl.php
+++ b/Theme/Backend/gl-create.tpl.php
@@ -15,17 +15,17 @@
 echo $this->getData('nav')->render(); ?>
 
 <section class="box w-50">
-    <header><h1><?= $this->getText('GL'); ?></h1></header>
+    <header><h1><?= $this->getHtml('GL') ?></h1></header>
     <div class="inner">
         <form>
             <table class="layout wf-100">
-                <tr><td><label for="iId"><?= $this->getText('ID', 0, 0); ?></label>
+                <tr><td><label for="iId"><?= $this->getHtml('ID', 0, 0); ?></label>
                 <tr><td><input type="text" id="iId" name="id">
-                <tr><td><label for="iName"><?= $this->getText('Name'); ?></label>
+                <tr><td><label for="iName"><?= $this->getHtml('Name') ?></label>
                 <tr><td><input type="text" id="iName" name="name">
-                <tr><td><label for="iParent"><?= $this->getText('Parent'); ?></label>
+                <tr><td><label for="iParent"><?= $this->getHtml('Parent') ?></label>
                 <tr><td><input type="text" id="iParent" name="parent">
-                <tr><td><input type="submit" value="<?= $this->getText('Create', 0, 0); ?>">
+                <tr><td><input type="submit" value="<?= $this->getHtml('Create', 0, 0); ?>">
             </table>
         </form>
     </div>
diff --git a/Theme/Backend/gl-list.tpl.php b/Theme/Backend/gl-list.tpl.php
index 5c2a80f..5673d9f 100644
--- a/Theme/Backend/gl-list.tpl.php
+++ b/Theme/Backend/gl-list.tpl.php
@@ -29,25 +29,25 @@ echo $this->getData('nav')->render(); ?>
     <div class="col-xs-12">
         <div class="box wf-100">
             <table class="table red">
-                <caption><?= $this->getText('GL'); ?></caption>
+                <caption><?= $this->getHtml('GL') ?></caption>
                 <thead>
                 <tr>
-                    <td><?= $this->getText('ID', 0, 0); ?>
-                    <td class="wf-100"><?= $this->getText('Name'); ?>
+                    <td><?= $this->getHtml('ID', 0, 0); ?>
+                    <td class="wf-100"><?= $this->getHtml('Name') ?>
                 <tfoot>
-                <tr><td colspan="5"><?= $footerView->render(); ?>
+                <tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
                 <tbody>
                 <?php $c = 0; foreach ([] as $key => $value) : $c++;
                 $url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/admin/group/settings?{?}&id=' . $value->getId()); ?>
                 <tr>
-                    <td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
-                    <td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
+                    <td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
+                    <td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
                     <td>
                     <td>
                     <td>
                         <?php endforeach; ?>
                         <?php if($c === 0) : ?>
-                <tr><td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
+                <tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
                         <?php endif; ?>
             </table>
         </div>
diff --git a/Theme/Backend/journal-list.tpl.php b/Theme/Backend/journal-list.tpl.php
index bf73972..b85f6a3 100644
--- a/Theme/Backend/journal-list.tpl.php
+++ b/Theme/Backend/journal-list.tpl.php
@@ -27,25 +27,25 @@ echo $this->getData('nav')->render(); ?>
 
 <div class="box w-100">
     <table class="table red">
-        <caption><?= $this->getText('Journal'); ?></caption>
+        <caption><?= $this->getHtml('Journal') ?></caption>
         <thead>
         <tr>
-            <td><?= $this->getText('ID', 0, 0); ?>
-            <td class="wf-100"><?= $this->getText('Name'); ?>
+            <td><?= $this->getHtml('ID', 0, 0); ?>
+            <td class="wf-100"><?= $this->getHtml('Name') ?>
         <tfoot>
-        <tr><td colspan="5"><?= $footerView->render(); ?>
+        <tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
         <tbody>
         <?php $c = 0; foreach ([] as $key => $value) : $c++;
         $url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/admin/group/settings?{?}&id=' . $value->getId()); ?>
         <tr>
-            <td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
-            <td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
+            <td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
+            <td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
             <td>
             <td>
             <td>
                 <?php endforeach; ?>
                 <?php if($c === 0) : ?>
-        <tr><td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
+        <tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
                 <?php endif; ?>
     </table>
 </div>
diff --git a/Theme/Backend/stack-archive-list.tpl.php b/Theme/Backend/stack-archive-list.tpl.php
index 5ca5b8a..9906596 100644
--- a/Theme/Backend/stack-archive-list.tpl.php
+++ b/Theme/Backend/stack-archive-list.tpl.php
@@ -27,27 +27,27 @@ echo $this->getData('nav')->render(); ?>
 
 <div class="box w-100">
     <table class="table red">
-        <caption><?= $this->getText('BatchPostings'); ?></caption>
+        <caption><?= $this->getHtml('BatchPostings') ?></caption>
         <thead>
         <tr>
-            <td><?= $this->getText('ID', 0, 0); ?>
-            <td class="wf-100"><?= $this->getText('Name'); ?>
-            <td><?= $this->getText('Creator'); ?>
-            <td><?= $this->getText('Created'); ?>
+            <td><?= $this->getHtml('ID', 0, 0); ?>
+            <td class="wf-100"><?= $this->getHtml('Name') ?>
+            <td><?= $this->getHtml('Creator') ?>
+            <td><?= $this->getHtml('Created') ?>
         <tfoot>
-        <tr><td colspan="5"><?= $footerView->render(); ?>
+        <tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
         <tbody>
         <?php $c = 0; foreach ([] as $key => $value) : $c++;
         $url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/admin/group/settings?{?}&id=' . $value->getId()); ?>
         <tr>
-            <td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
-            <td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
+            <td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
+            <td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
             <td>
             <td>
             <td>
                 <?php endforeach; ?>
                 <?php if($c === 0) : ?>
-        <tr><td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
+        <tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
                 <?php endif; ?>
     </table>
 </div>
diff --git a/Theme/Backend/stack-create.tpl.php b/Theme/Backend/stack-create.tpl.php
index 1f655c1..232767e 100644
--- a/Theme/Backend/stack-create.tpl.php
+++ b/Theme/Backend/stack-create.tpl.php
@@ -18,19 +18,19 @@
 echo $this->getData('nav')->render(); ?>
 
 <section class="box w-50">
-    <header><h1><?= $this->getText('Stack'); ?></h1></header>
+    <header><h1><?= $this->getHtml('Stack') ?></h1></header>
     <div class="inner">
         <form>
             <table class="layout wf-100">
-                <tr><td><label for="iName"><?= $this->getText('Name'); ?></label>
+                <tr><td><label for="iName"><?= $this->getHtml('Name') ?></label>
                 <tr><td><input id="iName" name="name" type="text">
-                <tr><td><label for="iType"><?= $this->getText('Type'); ?></label>
+                <tr><td><label for="iType"><?= $this->getHtml('Type') ?></label>
                 <tr><td><select id="iType" name="type">
-                            <option value=""><?= $this->getText('TAccount'); ?>
-                            <option value=""><?= $this->getText('Incoming'); ?>
-                            <option value=""><?= $this->getText('Outgoing'); ?>
+                            <option value=""><?= $this->getHtml('TAccount') ?>
+                            <option value=""><?= $this->getHtml('Incoming') ?>
+                            <option value=""><?= $this->getHtml('Outgoing') ?>
                         </select>
-                <tr><td><input name="submit" type="submit" value="<?= $this->getText('Create', 0, 0); ?>">
+                <tr><td><input name="submit" type="submit" value="<?= $this->getHtml('Create', 0, 0); ?>">
             </table>
         </form>
     </div>
diff --git a/Theme/Backend/stack-list.tpl.php b/Theme/Backend/stack-list.tpl.php
index 487076b..692eef5 100644
--- a/Theme/Backend/stack-list.tpl.php
+++ b/Theme/Backend/stack-list.tpl.php
@@ -29,27 +29,27 @@ echo $this->getData('nav')->render(); ?>
     <div class="col-xs-12">
         <div class="box wf-100">
             <table class="table red">
-                <caption><?= $this->getText('BatchPostings'); ?></caption>
+                <caption><?= $this->getHtml('BatchPostings') ?></caption>
                 <thead>
                 <tr>
-                    <td><?= $this->getText('ID', 0, 0); ?>
-                    <td class="wf-100"><?= $this->getText('Name'); ?>
-                    <td><?= $this->getText('Creator'); ?>
-                    <td><?= $this->getText('Created'); ?>
+                    <td><?= $this->getHtml('ID', 0, 0); ?>
+                    <td class="wf-100"><?= $this->getHtml('Name') ?>
+                    <td><?= $this->getHtml('Creator') ?>
+                    <td><?= $this->getHtml('Created') ?>
                 <tfoot>
-                <tr><td colspan="5"><?= $footerView->render(); ?>
+                <tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
                 <tbody>
                 <?php $c = 0; foreach ([] as $key => $value) : $c++;
                 $url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/admin/group/settings?{?}&id=' . $value->getId()); ?>
                 <tr>
-                    <td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
-                    <td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
+                    <td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
+                    <td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
                     <td>
                     <td>
                     <td>
                         <?php endforeach; ?>
                         <?php if($c === 0) : ?>
-                <tr><td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
+                <tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
                         <?php endif; ?>
             </table>
         </div>
diff --git a/Theme/Backend/stack-predefined-list.tpl.php b/Theme/Backend/stack-predefined-list.tpl.php
index 11d2e9f..b74717a 100644
--- a/Theme/Backend/stack-predefined-list.tpl.php
+++ b/Theme/Backend/stack-predefined-list.tpl.php
@@ -27,28 +27,28 @@ echo $this->getData('nav')->render(); ?>
 
 <div class="box w-100">
     <table class="table red">
-        <caption><?= $this->getText('BatchPostings'); ?></caption>
+        <caption><?= $this->getHtml('BatchPostings') ?></caption>
         <thead>
         <tr>
-            <td><?= $this->getText('ID', 0, 0); ?>
-            <td><?= $this->getText('Due'); ?>
-            <td class="wf-100"><?= $this->getText('Name'); ?>
-            <td><?= $this->getText('Creator'); ?>
-            <td><?= $this->getText('Created'); ?>
+            <td><?= $this->getHtml('ID', 0, 0); ?>
+            <td><?= $this->getHtml('Due') ?>
+            <td class="wf-100"><?= $this->getHtml('Name') ?>
+            <td><?= $this->getHtml('Creator') ?>
+            <td><?= $this->getHtml('Created') ?>
         <tfoot>
-        <tr><td colspan="5"><?= $footerView->render(); ?>
+        <tr><td colspan="5"><?= htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?>
         <tbody>
         <?php $c = 0; foreach ([] as $key => $value) : $c++;
         $url = \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/backend/admin/group/settings?{?}&id=' . $value->getId()); ?>
         <tr>
-            <td><a href="<?= $url; ?>"><?= $value->getId(); ?></a>
-            <td><a href="<?= $url; ?>"><?= $value->getName(); ?></a>
+            <td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?></a>
+            <td><a href="<?= $url; ?>"><?= htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?></a>
             <td>
             <td>
             <td>
                 <?php endforeach; ?>
                 <?php if($c === 0) : ?>
-        <tr><td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
+        <tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
                 <?php endif; ?>
     </table>
 </div>