From 2202b45911b80d07c62e8c292fdbc8b2fde1aa47 Mon Sep 17 00:00:00 2001
From: John Bojorquez <john.bojorquez@uconn.edu>
Date: Mon, 24 Apr 2017 10:01:10 -0400
Subject: [PATCH] Encode special HTML characters

---
 public/messages.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/public/messages.php b/public/messages.php
index e0fb5e3..b9a8760 100644
--- a/public/messages.php
+++ b/public/messages.php
@@ -43,11 +43,11 @@ include 'template/user_menu_button.php';
                                        class="material-icons red-text">fiber_new
                                     </i>
                                 <?php } ?>
-                                <?php echo $message->sender()->username ?>
+                                <?php echo htmlspecialchars($message->sender()->username) ?>
                             </div>
                             <div class="collapsible-body">
                                 <span>
-                                    <?php echo $message->message ?>
+                                    <?php echo htmlspecialchars($message->message) ?>
                                 </span>
                             </div>
                         </li>
@@ -64,11 +64,11 @@ include 'template/user_menu_button.php';
                                 <?php } else { ?>
                                     <i class="material-icons">arrow_forward</i>
                                 <?php } ?>
-                                <?php echo $message->receiver()->username ?>
+                                <?php echo htmlspecialchars($message->receiver()->username) ?>
                             </div>
                             <div class="collapsible-body">
                                 <span>
-                                    <?php echo $message->message ?>
+                                    <?php echo htmlspecialchars($message->message) ?>
                                 </span>
                             </div>
                         </li>