From db1b50cfc3a7f3b45891b0ff69db4892b0e6929e Mon Sep 17 00:00:00 2001
From: Michael Save <savetheinternet@tinyboard.org>
Date: Sat, 26 Jan 2013 00:00:39 +1100
Subject: [PATCH] Escape result in ?/debug/sql

---
 templates/mod/debug/sql.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/templates/mod/debug/sql.html b/templates/mod/debug/sql.html
index 63ba22f8..755995f9 100644
--- a/templates/mod/debug/sql.html
+++ b/templates/mod/debug/sql.html
@@ -10,17 +10,17 @@
 	<table class="modlog">
 		<tr>
 			{% for key in keys %}
-				<th>{{ key }}</th>
+				<th>{{ key | e }}</th>
 			{% endfor %}
 		</tr>
 		{% for row in result %}
 			<tr>
 				{% for col in row %}
-					<td>{{ col }}</td>
+					<td>{{ col | e }}</td>
 				{% endfor %}
 			</tr>
 		{% endfor %}
 	</table>
 {% elseif error %}
-	<p style="text-align:center;color:#d00">{{ error }}</p>
+	<p style="text-align:center;color:#d00">{{ error | e }}</p>
 {% endif %}