| @@ -725,11 +725,11 @@ | ||
| 725 | 725 | $guest_fname = $furl_segments[(count($furl_segments) - 1)]; |
| 726 | 726 | $read_fname = substr($guest_fname, (strpos($guest_fname, '_') + 1)); |
| 727 | 727 | ?> |
| 728 | 728 | <div class="vbo-paxfield-file-uploaded"> |
| 729 | - <a href="<?php echo $guest_file; ?>" target="_blank"> | |
| 729 | + <a href="<?php echo JHtml::fetch('esc_attr', $guest_file); ?>" target="_blank"> | |
| 730 | 730 | <?php VikBookingIcons::e('image'); ?> |
| 731 | - <span><?php echo $read_fname; ?></span> | |
| 731 | + <span><?php echo htmlspecialchars($read_fname); ?></span> | |
| 732 | 732 | </a> |
| 733 | 733 | </div> |
| 734 | 734 | <?php |
| 735 | 735 | } |
