From 5e624f44301153785a72adef1b6859fb1e9e29e6 Mon Sep 17 00:00:00 2001
From: Mark Unwin <marku@opmantek.com>
Date: Mon, 5 Feb 2024 14:59:17 +1000
Subject: [PATCH] HTML escape tages on devicesRead.

---
 app/Views/devicesRead.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/Views/devicesRead.php b/app/Views/devicesRead.php
index 6ede0c5be..c43264a8d 100644
--- a/app/Views/devicesRead.php
+++ b/app/Views/devicesRead.php
@@ -928,7 +928,7 @@
                                                 }
                                             }
                                             $othertags = json_encode($othertags);
-                                            echo '<button type="button" class="btn btn-primary rounded-pill" style="margin-right:20px;"><strong><a style="color:white;" href="' . url_to('devicesCollection') . '?devices.tags=' . $tag . '">' . $tag . '</a>&nbsp;&nbsp;&nbsp;</strong><a href="#" class="delete_tags" style="color:white;" data-tags=\'' . $othertags . '\'><span class="badge text-bg-secondary"><i class="close white-text fas fa-times"></i></span></a></button>';
+                                            echo '<button type="button" class="btn btn-primary rounded-pill" style="margin-right:20px;"><strong><a style="color:white;" href="' . url_to('devicesCollection') . '?devices.tags=' . html_entity_decode($tag, ENT_QUOTES | ENT_HTML5, 'UTF-8') . '">' . html_entity_decode($tag, ENT_QUOTES | ENT_HTML5, 'UTF-8') . '</a>&nbsp;&nbsp;&nbsp;</strong><a href="#" class="delete_tags" style="color:white;" data-tags=\'' . $othertags . '\'><span class="badge text-bg-secondary"><i class="close white-text fas fa-times"></i></span></a>';
                                         }
                                         ?>
                                 </div>