From 05ab38d355e347d72a2ff82de3ef978939a63326 Mon Sep 17 00:00:00 2001
From: Michael Save <savetheinternet@tinyboard.org>
Date: Mon, 9 Jan 2012 14:15:36 +1100
Subject: [PATCH] escape HTML in debug data

---
 inc/template.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/inc/template.php b/inc/template.php
index 2a8366c0..537016ac 100644
--- a/inc/template.php
+++ b/inc/template.php
@@ -28,7 +28,7 @@
 				unset($debug['start']);
 				
 			}
-			$options['body'] .= '<h3>Debug</h3><pre style="white-space: pre-wrap;font-size: 10px;">' . str_replace("\n", '<br/>', print_r($debug, true)) . '</pre>';
+			$options['body'] .= '<h3>Debug</h3><pre style="white-space: pre-wrap;font-size: 10px;">' . str_replace("\n", '<br/>', utf8tohtml(print_r($debug, true))) . '</pre>';
 		}
 		
 		$loader->setPaths($config['dir']['template']);