From 50bfcb7eb8ede451d52c858d2d73859672305b95 Mon Sep 17 00:00:00 2001
From: denise <denise@denise-DX4860sourcefabric.org>
Date: Tue, 5 Feb 2013 15:37:00 -0500
Subject: [PATCH] XSS exploit prevention

- Calendar -> show content
---
 .../views/scripts/schedule/show-content-dialog.phtml        | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/airtime_mvc/application/views/scripts/schedule/show-content-dialog.phtml b/airtime_mvc/application/views/scripts/schedule/show-content-dialog.phtml
index 09aadb4d8..3f0ae83c7 100644
--- a/airtime_mvc/application/views/scripts/schedule/show-content-dialog.phtml
+++ b/airtime_mvc/application/views/scripts/schedule/show-content-dialog.phtml
@@ -13,9 +13,9 @@
 <?php foreach($this->showContent as $row): ?>
     <tr id="au_<?php echo $row["item_id"] ?>" class="<?php if($i&1){echo "even";}else{echo "odd";}?>">
         <td><?php echo $row["starts"] ?></td>
-        <td><?php echo $row["track_title"] ?></td>
-        <td><?php echo $row["creator"] ?></td>
-        <td><?php echo $row["album"] ?></td>
+        <td><?php echo $this->escape($row["track_title"]) ?></td>
+        <td><?php echo $this->escape($row["creator"]) ?></td>
+        <td><?php echo $this->escape($row["album"]) ?></td>
         <td class="library_length"><?php echo $row["length"] ?></td>
         <td><?php echo $row["genre"] ?></td>
     </tr>