From ee4196ba80c74a6c3598111d21744c641b056ca4 Mon Sep 17 00:00:00 2001
From: John Flatness <john@zerocrates.org>
Date: Tue, 25 Jul 2023 12:28:03 -0400
Subject: [PATCH] Escape browse preview heading

---
 view/common/block-layout/browse-preview.phtml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/view/common/block-layout/browse-preview.phtml b/view/common/block-layout/browse-preview.phtml
index b1f3e33..62b674b 100644
--- a/view/common/block-layout/browse-preview.phtml
+++ b/view/common/block-layout/browse-preview.phtml
@@ -10,7 +10,7 @@ $currentLayout = (strpos($layoutSetting, 'grid') !== false) ? 'grid' : 'list';
 <div class="preview-block browse">
 
 <?php if ($this->heading): ?>
-<h2><?php echo $this->heading; ?></h2>
+<h2><?php echo $escape($this->heading); ?></h2>
 <?php endif; ?>
 
 <?php if (strpos($layoutSetting, 'toggle') !== false): ?>