From 6057f47313819fa346dce7b72cf3922ba7931f1a Mon Sep 17 00:00:00 2001
From: Phy <i@phy25.com>
Date: Tue, 1 Aug 2017 13:07:29 +0800
Subject: [PATCH] Add htmlspecialchars when showing $DATE_AT

Fixes #2061
---
 doku.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doku.php b/doku.php
index 42624fd2e8..cbb4959142 100644
--- a/doku.php
+++ b/doku.php
@@ -62,7 +62,7 @@
     } else { // check for UNIX Timestamp
         $date_parse = @date('Ymd',$DATE_AT);
         if(!$date_parse || $date_parse === '19700101') {
-            msg(sprintf($lang['unable_to_parse_date'], $DATE_AT));
+            msg(sprintf($lang['unable_to_parse_date'], htmlspecialchars($DATE_AT)));
             $DATE_AT = null;
         }
     }