From 0db0bfdfd4a1f4cd28b9f227e86ebb60176bf04d Mon Sep 17 00:00:00 2001
From: FreeScout <freescout.helpdesk@gmail.com>
Date: Sun, 29 Aug 2021 01:47:05 -0700
Subject: [PATCH] Improve security of Translate page

---
 resources/views/vendor/translation-manager/content.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/resources/views/vendor/translation-manager/content.php b/resources/views/vendor/translation-manager/content.php
index 5a096d70..4e2fc7ca 100644
--- a/resources/views/vendor/translation-manager/content.php
+++ b/resources/views/vendor/translation-manager/content.php
@@ -21,7 +21,7 @@
                 <p>Done searching for translations, found <strong class="counter">N</strong> items!</p>
             </div>
             <div class="alert alert-success success-publish" style="display:none;">
-                <p>Done publishing translations for group '<?php echo $group ?>'!</p>
+                <p>Done publishing translations for group '<?php echo htmlspecialchars($group) ?>'!</p>
             </div>
             <?php if(Session::has('successPublish')) : ?>
                 <div class="alert alert-info">
@@ -91,7 +91,7 @@
                 </form>
             <?php endif ?>
             <?php if(isset($group)) : ?>
-                <form class="form-inline form-publish" method="POST" action="<?php echo action('\Barryvdh\TranslationManager\Controller@postPublish', $group) ?>" data-remote="true" role="form" data-confirm="Are you sure you want to publish the translations group '<?php echo $group ?>? This will overwrite existing language files.">
+                <form class="form-inline form-publish" method="POST" action="<?php echo action('\Barryvdh\TranslationManager\Controller@postPublish', $group) ?>" data-remote="true" role="form" data-confirm="Are you sure you want to publish the translations group '<?php echo htmlspecialchars($group) ?>? This will overwrite existing language files.">
                     <input type="hidden" name="_token" value="<?php echo csrf_token(); ?>">
                     <?php /*<button type="submit" class="btn btn-primary" data-disable-with="Publishing…" >Publish translations</button>*/ ?>
                     <a href="<?= action('\Barryvdh\TranslationManager\Controller@getIndex') ?>" class="btn btn-primary">« Back</a>