if using older PHP version (like 7), the default flags for htmlspecialchars() are suboptimal, _sigh_HEADmaster

1 files changed, 2 insertions, 2 deletions

diff --git a/index.php b/index.php
index 951be29..229cce2 100644
--- a/index.php
+++ b/index.php
@@ -54,7 +54,7 @@
                 <form action="/search.php">
                     <div id="query_wrap">
                         <div    id="query_icon"></div>
-                        <input  id="query"   type='search' value='<?php if($action === 'lmmtfy') echo htmlspecialchars($query);?>' name='query' autocorrect="off" autocapitalize="none" required autofocus/>
+                        <input  id="query"   type='search' value='<?php if($action === 'lmmtfy') echo htmlspecialchars($query, $hsc_flags);?>' name='query' autocorrect="off" autocapitalize="none" required autofocus/>
                         <button id="btn_def" type='submit' value='man' name='action' class="btn-def" aria-hidden="true" tabindex="-1"></button>
                         <input type="checkbox" id="query_opts_toggle"/>
                         <div id="query_opts">
@@ -81,7 +81,7 @@
                                         if((strlen($arch) > 0) && ($arch == $a))
                                             $sel = 'selected="selected"';
 
-                                        $a = htmlspecialchars($a);
+                                        $a = htmlspecialchars($a, $hsc_flags);
                                         echo "<option value='$a' $sel>$a</option>";
                                     }
                                 ?>