From b152663ff535f8ebbe2bbdad911f09ca616134e3 Mon Sep 17 00:00:00 2001
From: Tschallacka <mdibbets@outlook.com>
Date: Tue, 29 Aug 2017 18:29:48 +0200
Subject: [PATCH] Attribute values for < and > and '' should be written als
 &lt; &gt; and &quot;(when enclosed with double quotes for attribute
 delimters) (#3043)

---
 modules/cms/widgets/mediamanager/partials/_upload-progress.htm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/cms/widgets/mediamanager/partials/_upload-progress.htm b/modules/cms/widgets/mediamanager/partials/_upload-progress.htm
index 92a423b4e..c315c84c5 100644
--- a/modules/cms/widgets/mediamanager/partials/_upload-progress.htm
+++ b/modules/cms/widgets/mediamanager/partials/_upload-progress.htm
@@ -3,7 +3,7 @@
         <div class="upload-progress">
             <h5 
                 data-label="file-number-and-progress"
-                data-message-template="<?= e(trans('cms::lang.media.uploading_file_num')) ?> <span>:percents</span>"
+                data-message-template="<?= e(trans('cms::lang.media.uploading_file_num')) ?> &lt;span&gt;:percents&lt;/span&gt;"
                 data-success-template="<?= e(trans('cms::lang.media.uploading_complete')) ?>"
                 data-error-template="<?= e(trans('cms::lang.media.uploading_error')) ?>"
             ></h5>