From b0ec073c52826477131489eee22868a163075260 Mon Sep 17 00:00:00 2001
From: Dennis Eichhorn <spl1nes.com@googlemail.com>
Date: Mon, 24 Jul 2017 20:48:22 +0200
Subject: [PATCH] Add html escaping

---
 Theme/Backend/support-list.tpl.php  | 14 +++++++-------
 Theme/Backend/ticket-create.tpl.php | 14 +++++++-------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/Theme/Backend/support-list.tpl.php b/Theme/Backend/support-list.tpl.php
index 4bdf949..167e7bb 100644
--- a/Theme/Backend/support-list.tpl.php
+++ b/Theme/Backend/support-list.tpl.php
@@ -21,16 +21,16 @@ echo $this->getData('nav')->render(); ?>
     <div class="col-xs-12">
         <div class="box wf-100">
             <table class="table red">
-                <caption><?= $this->getText('Tickets'); ?></caption>
+                <caption><?= $this->getHtml('Tickets') ?></caption>
                 <thead>
-                <tr><td><?= $this->getText('ID', 0, 0); ?>
-                    <td><?= $this->getText('Status'); ?>
-                    <td><?= $this->getText('Priority'); ?>
-                    <td class="full"><?= $this->getText('Title'); ?>
-                    <td><?= $this->getText('Responsible'); ?>
+                <tr><td><?= $this->getHtml('ID', 0, 0); ?>
+                    <td><?= $this->getHtml('Status') ?>
+                    <td><?= $this->getHtml('Priority') ?>
+                    <td class="full"><?= $this->getHtml('Title') ?>
+                    <td><?= $this->getHtml('Responsible') ?>
                 <tfoot>
                 <tbody>
-                <tr><td colspan="5" class="empty"><?= $this->getText('Empty', 0, 0); ?>
+                <tr><td colspan="5" class="empty"><?= $this->getHtml('Empty', 0, 0); ?>
             </table>
         </div>
     </div>
diff --git a/Theme/Backend/ticket-create.tpl.php b/Theme/Backend/ticket-create.tpl.php
index 3110f1a..bb811a8 100644
--- a/Theme/Backend/ticket-create.tpl.php
+++ b/Theme/Backend/ticket-create.tpl.php
@@ -18,22 +18,22 @@
 echo $this->getData('nav')->render(); ?>
 
 <section class="box w-50">
-    <header><h1><?= $this->getText('Ticket') ?></h1></header>
+    <header><h1><?= $this->getHtml('Ticket'); ?></h1></header>
     <div class="inner">
         <form action="<?= \phpOMS\Uri\UriFactory::build('{/base}/{/lang}/api/reporter/template'); ?>" method="post">
             <table class="layout wf-100">
                 <tbody>
-                <tr><td><label for="iTitle"><?= $this->getText('Department') ?></label>
+                <tr><td><label for="iTitle"><?= $this->getHtml('Department'); ?></label>
                 <tr><td><select></select>
-                <tr><td><label for="iTitle"><?= $this->getText('Topic') ?></label>
+                <tr><td><label for="iTitle"><?= $this->getHtml('Topic'); ?></label>
                 <tr><td><select></select>
-                <tr><td><label for="iTitle"><?= $this->getText('Title') ?></label>
+                <tr><td><label for="iTitle"><?= $this->getHtml('Title'); ?></label>
                 <tr><td><input id="iTitle" name="name" type="text" required>
-                <tr><td><label for="iTitle"><?= $this->getText('Description') ?></label>
+                <tr><td><label for="iTitle"><?= $this->getHtml('Description'); ?></label>
                 <tr><td><textarea required></textarea>
-                <tr><td><label for="iFile"><?= $this->getText('Files') ?></label>
+                <tr><td><label for="iFile"><?= $this->getHtml('Files'); ?></label>
                 <tr><td><input id="iFile" name="fileVisual" type="file" multiple><input id="iFileHidden" name="files" type="hidden">
-                <tr><td><input type="submit" value="<?= $this->getText('Create', 0, 0); ?>">
+                <tr><td><input type="submit" value="<?= $this->getHtml('Create', 0, 0); ?>">
             </table>
         </form>
     </div>