Escape variables in example module

midasplatform · Dec 8, 2014 · adfe74a · adfe74a
1 parent 803b739
commit adfe74a
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/modules/example/views/sample/view.phtml b/modules/example/views/sample/view.phtml
@@ -23,10 +23,10 @@ $this->headScript()->appendFile($this->moduleWebroot.'/public/js/sample/example.
     <table>
         <?php
         foreach ($this->sampleList as $sample) {
-            echo '<tr><td>'.$sample.'</td></tr>';
+            echo '<tr><td>'.$this->escape($sample).'</td></tr>';
         }
         ?>
     </table>
 <?php
-echo 'wallet dollars: '.$this->wallet->getDollars();
-echo 'credit card count: '.$this->wallet->getCreditCardCount();
+echo 'wallet dollars: '.$this->escape($this->wallet->getDollars());
+echo 'credit card count: '.$this->escape($this->wallet->getCreditCardCount());