encode special chars in some places

Signed-off-by: Florian Pritz <bluewind@xinu.at>

1 files changed, 2 insertions, 2 deletions

diff --git a/application/models/file_mod.php b/application/models/file_mod.php
index ee759b18f..05b4ef08c 100644
--- a/application/models/file_mod.php
+++ b/application/models/file_mod.php
@@ -266,7 +266,7 @@ class File_mod extends CI_Model {
 			exit();
 		}
 
-		$data['title'] = $filedata['filename'];
+		$data['title'] = htmlspecialchars($filedata['filename']);
 		$data['raw_link'] = site_url($id);
 		$data['new_link'] = site_url();
 		$data['plain_link'] = site_url($id.'/plain');
@@ -276,7 +276,7 @@ class File_mod extends CI_Model {
 
 		header("Content-Type: text/html\n");
 
-		$data['current_highlight'] = $mode;
+		$data['current_highlight'] = htmlspecialchars($mode);
 
 		if (filesize($file) > $this->config->item("small_upload_size")) {
 			$data['timeout'] = date("r", $filedata["date"] + $this->config->item("upload_max_age"));