diff --git a/htdocs/commande/list.php b/htdocs/commande/list.php index d9a6876ac17..76865631995 100644 --- a/htdocs/commande/list.php +++ b/htdocs/commande/list.php @@ -2213,8 +2213,8 @@ while ($i < $imaxinloop) { // Alias name if (!empty($arrayfields['s.name_alias']['checked'])) { - print ''; - print $obj->alias; + print ''; + print dol_escape_htmltag($obj->alias); print ''; if (!$i) { $totalarray['nbfield']++; @@ -2244,8 +2244,8 @@ while ($i < $imaxinloop) { // Town if (!empty($arrayfields['s.town']['checked'])) { - print ''; - print $obj->town; + print ''; + print dol_escape_htmltag($obj->town); print ''; if (!$i) { $totalarray['nbfield']++; @@ -2254,8 +2254,8 @@ while ($i < $imaxinloop) { // Zip if (!empty($arrayfields['s.zip']['checked'])) { - print ''; - print $obj->zip; + print ''; + print dol_escape_htmltag($obj->zip); print ''; if (!$i) { $totalarray['nbfield']++; @@ -2264,7 +2264,7 @@ while ($i < $imaxinloop) { // State if (!empty($arrayfields['state.nom']['checked'])) { - print "".$obj->state_name."\n"; + print ''.dol_escape_htmltag($obj->state_name)."\n"; if (!$i) { $totalarray['nbfield']++; }