fix #2091 @0.25

diff --git a/inc/ws/Util/html5/master/class.ws.html5.links.php b/inc/ws/Util/html5/master/class.ws.html5.links.php
index 5914e4934bd0fa10faa42d5745843eec95c52606..2a8efc7e54d4481d2094d06ac41ef291f99cd486 100644 (file)
--- a/inc/ws/Util/html5/master/class.ws.html5.links.php
+++ b/inc/ws/Util/html5/master/class.ws.html5.links.php
@@ -413,7 +413,7 @@ class textPopupLink extends normalLink
        public function getAdditionnalContent()
        {
                $res = parent::getAdditionnalContent();
-               $res .= ' data-text="' . $this->infobulle . '" ';
+               $res .= ' data-text="' . htmlspecialchars($this->infobulle, ENT_QUOTES) . '" ';
                return $res;
        }
 
@@ -1377,7 +1377,7 @@ class inpesPopinLink extends htmlMultimediaLink
                $tooltip = '';
                $t = $this->getTooltip();
                if ($t !== false) {
-                       $tooltip = ' data-tooltip="' . $t . '"';
+                       $tooltip = ' data-tooltip="' . htmlspecialchars($t, ENT_QUOTES) . '"';
                }
                return '<a href="#" ' . $tooltip . $c . $this->getAdditionnalContent() . '></a>';
        }