diff --git a/htdocs/core/lib/functions.lib.php b/htdocs/core/lib/functions.lib.php index ea63fa2fcb3..96b05a9e283 100644 --- a/htdocs/core/lib/functions.lib.php +++ b/htdocs/core/lib/functions.lib.php @@ -6113,7 +6113,7 @@ function print_fiche_titre($title, $mesg = '', $picto = 'generic', $pictoisfullp /** * Load a title with picto * - * @param string $title Title to show + * @param string $title Title to show (HTML sanitized content) * @param string $morehtmlright Added message to show on right * @param string $picto Icon to use before title (should be a 32x32 transparent png file) * @param int $pictoisfullpath 1=Icon name is a full absolute url of image @@ -6138,7 +6138,9 @@ function load_fiche_titre($title, $morehtmlright = '', $picto = 'generic', $pict $return .= ''.img_picto('', $picto, 'class="valignmiddle widthpictotitle pictotitle"', $pictoisfullpath).''; } $return .= ''; - $return .= '
'.dol_escape_htmltag($title).'
'; + $return .= '
'; + $return .= $title; // $title is already HTML sanitized content + $return .= '
'; $return .= ''; if (dol_strlen($morehtmlcenter)) { $return .= ''.$morehtmlcenter.'';