added default escaping for smarty

[contagged] / templates / list_entry.tpl

diff --git a/templates/list_entry.tpl b/templates/list_entry.tpl
index e6a9ed5dd9d145df1bf2b97a5ddd61273e7eca56..a6d7d55c1c1b03cc23466fde359a80d55c2e0930 100644 (file)
--- a/templates/list_entry.tpl
+++ b/templates/list_entry.tpl
@@ -17,7 +17,7 @@
   </td>
   <td class="result" width="16">
     {if $entry.photo}
-      <a href="img.php?dn={$entry.dn|escape:url}" target="_blank" title="{$lang.photo}"><img src="pix/image.png" border="0" width="16" height="16" align="middle" title="{$lang.photo}"></a>
+      <a href="img.php?dn={$entry.dn|escape:url}&amp;.jpg" rel="imagebox" target="_blank" title="{$entry.givenname|escape} {$entry.name|escape}"><img src="pix/image.png" border="0" width="16" height="16" align="middle" title="{$lang.photo}"></a>
     {else}
       &nbsp;
     {/if}