From 044d14ce2eb008940f14c1d96ebd912d430215c0 Mon Sep 17 00:00:00 2001
From: Laurent Destailleur <eldy@destailleur.fr>
Date: Sat, 17 Feb 2024 19:56:45 +0100
Subject: [PATCH] Add dol_escape_htmltag

---
 htdocs/api/class/api_setup.class.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/htdocs/api/class/api_setup.class.php b/htdocs/api/class/api_setup.class.php
index 97c1cb02c57..fa0a9941a94 100644
--- a/htdocs/api/class/api_setup.class.php
+++ b/htdocs/api/class/api_setup.class.php
@@ -2201,7 +2201,7 @@ class Setup extends DolibarrApi
 						$i++;
 						$out .= '<tr class="oddeven">';
 						$out .= '<td>'.$i.'</td>'."\n";
-						$out .= '<td>'.$file['filename'].'</td>'."\n";
+						$out .= '<td>'.dol_escape_htmltag($file['filename']).'</td>'."\n";
 						$out .= '<td class="center">'.$file['expectedmd5'].'</td>'."\n";
 						$out .= "</tr>\n";
 					}
@@ -2234,7 +2234,7 @@ class Setup extends DolibarrApi
 						$i++;
 						$out .= '<tr class="oddeven">';
 						$out .= '<td>'.$i.'</td>'."\n";
-						$out .= '<td>'.$file['filename'].'</td>'."\n";
+						$out .= '<td>'.dol_escape_htmltag($file['filename']).'</td>'."\n";
 						$out .= '<td class="center">'.$file['expectedmd5'].'</td>'."\n";
 						$out .= '<td class="center">'.$file['md5'].'</td>'."\n";
 						$size = dol_filesize(DOL_DOCUMENT_ROOT.'/'.$file['filename']);
@@ -2280,7 +2280,7 @@ class Setup extends DolibarrApi
 						$i++;
 						$out .= '<tr class="oddeven">';
 						$out .= '<td>'.$i.'</td>'."\n";
-						$out .= '<td>'.$file['filename'].'</td>'."\n";
+						$out .= '<td>'.dol_escape_htmltag($file['filename']).'</td>'."\n";
 						$out .= '<td class="center">'.$file['expectedmd5'].'</td>'."\n";
 						$out .= '<td class="center">'.$file['md5'].'</td>'."\n";
 						$size = dol_filesize(DOL_DOCUMENT_ROOT.'/'.$file['filename']);