added default escaping for smarty

[contagged] / init.php

diff --git a/init.php b/init.php
index 9bd00d2e916282635f4b7414c7ed672ab147816a..ec981fa620969c9d7f4a3fe986743a9ee9d4d93a 100644 (file)
--- a/init.php
+++ b/init.php
@@ -37,4 +37,5 @@
   $smarty->use_sub_dirs  = 0;
   $smarty->template_dir  = './templates';
   $smarty->force_compile = $conf['smartycompile'];
+  $smarty->default_modifiers = 'escape:"htmlall":"UTF-8"';
 ?>