- Dev-Editor is now able to forbid accessing a file using the configuration file

[devedit.git] / modules / Output.pm

diff --git a/modules/Output.pm b/modules/Output.pm
index 9ef361c8c926e5f940a2a8a1fce2832b35d88066..cd4e53eaeda032a001e01c18863ed62d6f9c20cb 100644 (file)
--- a/modules/Output.pm
+++ b/modules/Output.pm
@@ -60,7 +60,7 @@ sub error($;$$)
  $tpl->read_file($tpl_error);
 
  $tpl->fillin('ERROR',$message);
- $tpl->fillin('BACK',$path);
+ $tpl->fillin('BACK',encode_html($path));
  $tpl->fillin('BACK_URL',escape($path));
  $tpl->fillin('SCRIPT',encode_html($ENV{'SCRIPT_NAME'}));