From 40e73b005b86331a709c456df866c709a1989ad7 Mon Sep 17 00:00:00 2001
From: zero <skklove@gmail.com>
Date: Fri, 23 Nov 2007 06:50:54 +0000
Subject: [PATCH] git-svn-id: http://xe-core.googlecode.com/svn/sandbox@3059
 201d5d3c-b55e-5fd7-737f-ddc643e51545

---
 widgets/tab_newest_document/skins/xe_official/list.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/widgets/tab_newest_document/skins/xe_official/list.html b/widgets/tab_newest_document/skins/xe_official/list.html
index 8a8263055..1d52d1450 100644
--- a/widgets/tab_newest_document/skins/xe_official/list.html
+++ b/widgets/tab_newest_document/skins/xe_official/list.html
@@ -11,7 +11,7 @@
 <div class="tabWdiget">
     <div class="tabBox">
     <!--@foreach($tab_list as $key => $val)-->
-        <div class="tab <!--@if(!$_checked)-->on{@ $_checked = true;}<!--@end-->" id="tab_{$_id_prefix}_{$key}" onmouseover="overTab(this);"><div><a href="{getUrl('','mid',$val->mid)}">{$val->browser_title}</a></div></div>
+        <div class="tab <!--@if(!$_checked)-->on{@ $_checked = true;}<!--@end-->" id="tab_{$_id_prefix}_{$key}" onmouseover="overTab(this);"><div><a href="{getUrl('','mid',$val->mid)}">{htmlspecialchars($val->browser_title)}</a></div></div>
     <!--@end-->
         <div class="clear"></div>
     </div>