Escape browse preview heading

omeka-s-themes · Jul 25, 2023 · ee4196b · ee4196b
1 parent 90ae271
commit ee4196b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/view/common/block-layout/browse-preview.phtml b/view/common/block-layout/browse-preview.phtml
@@ -10,7 +10,7 @@ $currentLayout = (strpos($layoutSetting, 'grid') !== false) ? 'grid' : 'list';
 <div class="preview-block browse">
 
 <?php if ($this->heading): ?>
-<h2><?php echo $this->heading; ?></h2>
+<h2><?php echo $escape($this->heading); ?></h2>
 <?php endif; ?>
 
 <?php if (strpos($layoutSetting, 'toggle') !== false): ?>