escape strings - brady's comment on pr openemr#7359

ruthkonyn · Apr 23, 2024 · 7f23ec4 · 7f23ec4
1 parent 2500b2c
commit 7f23ec4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/interface/patient_file/history/encounters.php b/interface/patient_file/history/encounters.php
@@ -314,7 +314,7 @@ function changePageSize() {
  $name = getPatientNameFirstLast($pid);
  $dob = text(oeFormatShortDate(getPatientData($pid, "DOB")['DOB']));
  $external_id = getPatientData($pid, "pubpid")['pubpid'];
- echo $name . " (" . $external_id . ")" . "&nbsp; &nbsp; DOB: " . $dob ;
+ echo text($name) . " (" . text($external_id) . ")" . "&nbsp; &nbsp; DOB: " . $dob ;
  }
  ?>
  </span>