make the page valid

diff --git a/data/templates/sidebar.block.search.php b/data/templates/sidebar.block.search.php
index f4e6b42cb8e9b0f1b798d781e05dac1503d60423..d3cd8a5aa190cbb65e432cc6e0afba2bb2e786f8 100644 (file)
--- a/data/templates/sidebar.block.search.php
+++ b/data/templates/sidebar.block.search.php
@@ -34,7 +34,7 @@ foreach ($lastSearches as $row) {
     echo  '<a href="'
         . htmlspecialchars(createURL('search', $range.'/'.$row['shTerms']))
         . '">';
-    echo $row['shTerms'];
+    echo htmlspecialchars($row['shTerms']);
     echo '</a>';
     echo ' <span title="'
         . T_('Number of bookmarks for this query')