Sanitize HTML

diff --git a/apps/files_external/templates/settings.php b/apps/files_external/templates/settings.php
index d7a4dd5150d75497b05f256c4768861159188d3f..3709fd2e51d5034f0110d79631d22834fa07d68b 100644 (file)
--- a/apps/files_external/templates/settings.php
+++ b/apps/files_external/templates/settings.php
@@ -18,7 +18,7 @@
                        <?php foreach ($_['mounts'] as $mountPoint => $mount): ?>
                                <tr <?php echo ($mountPoint != '') ? 'class="'.$mount['class'].'"' : 'id="addMountPoint"'; ?>>
                                        <td class="mountPoint"><input type="text" name="mountPoint"
-                                                                                                 value="<?php echo $mountPoint; ?>"
+                                                                                                 value="<?php p($mountPoint); ?>"
                                                                                                  placeholder="<?php echo $l->t('Mount point'); ?>" /></td>
                                        <?php if ($mountPoint == ''): ?>
                                                <td class="backend">