From 2c7d3b743462e0bfbe45dd72fdd34f7ed76ec04b Mon Sep 17 00:00:00 2001
From: iglocska <andras.iklody@gmail.com>
Date: Fri, 22 Sep 2023 14:14:47 +0200
Subject: [PATCH] chg: [escaping] added to event ID

---
 app/View/Threads/view.ctp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/View/Threads/view.ctp b/app/View/Threads/view.ctp
index 2a0372084..295e68d33 100644
--- a/app/View/Threads/view.ctp
+++ b/app/View/Threads/view.ctp
@@ -1,7 +1,7 @@
 <div class="threads view">
     <h3><?php
         if (isset($thread['Thread']['event_id']) && $thread['Thread']['event_id']) {
-            echo '<a href="' . $baseurl . '/events/view/' . $thread['Thread']['event_id'] . '">' . h($thread['Thread']['title']) . '</a>';
+            echo '<a href="' . $baseurl . '/events/view/' . h($thread['Thread']['event_id']) . '">' . h($thread['Thread']['title']) . '</a>';
         } else {
             echo h($thread['Thread']['title']);
         }