From 08b64ad6326ea221581fcd6c7346cb49a602d3bf Mon Sep 17 00:00:00 2001
From: Georgy Litvinov <git@litvinovg.pro>
Date: Wed, 2 Sep 2020 14:50:26 +0200
Subject: [PATCH] Escape search query string

---
 webapp/src/main/webapp/themes/iph/templates/search.ftl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webapp/src/main/webapp/themes/iph/templates/search.ftl b/webapp/src/main/webapp/themes/iph/templates/search.ftl
index 52b72da6..3e520bf3 100644
--- a/webapp/src/main/webapp/themes/iph/templates/search.ftl
+++ b/webapp/src/main/webapp/themes/iph/templates/search.ftl
@@ -8,7 +8,7 @@
 
         <form id="search-form" action="${urls.customsearch}" name="search" role="search" accept-charset="UTF-8" method="POST">
             <div id="search-field">
-                <input type="text" name="querytext" class="search-vivo" value="${querytext!}" autocapitalize="off" />
+                <input type="text" name="querytext" class="search-vivo" value="${querytext?html!}" autocapitalize="off" />
                 <input type="submit" value="${i18n().search_button}" class="search">
             </div>
         </form>