Commit e164984f authored by Richard Mansfield's avatar Richard Mansfield
Browse files

HTML Escape friend request message

parent 1e5174a9
......@@ -35,7 +35,7 @@
</div>
{if $relationship == 'pending'}
<div class="message">
{str tag='whymakemeyourfriend' section='group'} {$message}
{str tag='whymakemeyourfriend' section='group'} {$message|escape}
{$requestform}
</div>
{/if}
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment