escape import CSV column names

2020-03-31 04:17:41 -06:00 · 2020-03-31 04:17:41 -06:00 · cd0b6a791f
parent 6711dae8ef
commit cd0b6a791f
1 changed files with 1 additions and 1 deletions
--- a/modules/backend/behaviors/importexportcontroller/partials/_import_file_columns.htm
+++ b/modules/backend/behaviors/importexportcontroller/partials/_import_file_columns.htm
@ -22,7 +22,7 @@
                                class="column-label"
                                onclick="$.oc.importBehavior.loadFileColumnSample(this)"
                            >
-                                <?= $column ?>
+                                <?= e($column) ?>
                            </a>
                        </span>
                    </div>