From db987616a75aa035fb9402bb999ccb1cf29092e0 Mon Sep 17 00:00:00 2001 From: Martin Monperrus Date: Thu, 15 May 2014 22:09:24 +0200 Subject: [PATCH] fixes a bug in Javascript progressive enhancement (bug reported by Elvis) --- bibtexbrowser.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bibtexbrowser.php b/bibtexbrowser.php index 6b54323..644845d 100755 --- a/bibtexbrowser.php +++ b/bibtexbrowser.php @@ -1544,7 +1544,7 @@ class BibEntry { function toEntryUnformatted() { $result = ""; $result .= '
'; // pre is nice when it is embedded with no CSS available
-    $entry = str_replace('<','<',$this->getFullText());
+    $entry = htmlspecialchars($this->getFullText());
     if ($this->hasField('url')) {
       $url = $this->getField('url');
       // this is not a parsing but a simple replacement