Escape result in ?/debug/sql

2013-01-26 00:00:39 +11:00 · 2013-01-26 00:00:39 +11:00 · db1b50cfc3
commit db1b50cfc3
parent cadf276891
1 changed files with 3 additions and 3 deletions
--- a/templates/mod/debug/sql.html
+++ b/templates/mod/debug/sql.html
@ -10,17 +10,17 @@
 	<table class="modlog">
 		<tr>
 			{% for key in keys %}
-				<th>{{ key }}</th>
+				<th>{{ key | e }}</th>
 			{% endfor %}
 		</tr>
 		{% for row in result %}
 			<tr>
 				{% for col in row %}
-					<td>{{ col }}</td>
+					<td>{{ col | e }}</td>
 				{% endfor %}
 			</tr>
 		{% endfor %}
 	</table>
 {% elseif error %}
-	<p style="text-align:center;color:#d00">{{ error }}</p>
+	<p style="text-align:center;color:#d00">{{ error | e }}</p>
 {% endif %}