Fix more vulnerabilities

app/views/comment/search.php

@@ -1,7 +1,7 @@
 <div id="forum">
   <div style="margin-bottom: 1em;">
     <?= $this->formTag(['action' => "search"], ['method' => 'get'], function(){ ?>
-      <?= $this->textFieldTag("query", $this->params()->query, ['size' => 40]) ?>
+      <?= $this->textFieldTag("query", $this->h($this->params()->query), ['size' => 40]) ?>
       <?= $this->submitTag($this->t('.submit')) ?>
     <?php }) ?>
   </div>

app/views/forum/index.php

@@ -1,7 +1,7 @@
 <div id="forum">
   <div id="search" style="margin-bottom: 1em;">
     <?= $this->formTag(['action' => "search"], ['method' => 'get'], function(){ ?>
-      <?= $this->textFieldTag("query", $this->params()->query, ['size' => 40]) ?>
+      <?= $this->textFieldTag("query", $this->h($this->params()->query), ['size' => 40]) ?>
       <?= $this->submitTag($this->t('.search')) ?>
     <?php }) ?>
   </div>

app/views/note/search.php

@@ -1,7 +1,7 @@
 <h4><?= $this->t('.title') ?></h4>
 
 <?= $this->formTag(['action' => 'search'], ['method' => 'get'], function(){ ?>
-  <?= $this->textFieldTag("query", $this->params()->query,  ['size' => '40']) ?> <?= $this->submitTag($this->t('.search')) ?>
+  <?= $this->textFieldTag("query", $this->h($this->params()->query),  ['size' => '40']) ?> <?= $this->submitTag($this->t('.search')) ?>
 <?php }) ?>
 
 <?php if ($this->notes) : ?>

app/views/pool/index.php

@@ -4,7 +4,7 @@
       <?php if ($this->params()->order) : ?>
       <?= $this->hiddenFieldTag("order", $this->params()->order) ?>
       <?php endif ?>
-      <?= $this->textFieldTag("query", $this->params()->query, ['size' => 40]) ?>
+      <?= $this->textFieldTag("query", $this->h($this->params()->query), ['size' => 40]) ?>
       <?= $this->submitTag($this->t('.search'), ['name' => '']) ?>
     <?php }) ?>
   </div>

app/views/post/moderate.php

@@ -1,5 +1,5 @@
 <form method="get" action="/post/moderate">
-  <?= $this->textFieldTag("query", $this->params()->query, ['size' => '40']) ?>
+  <?= $this->textFieldTag("query", $this->h($this->params()->query), ['size' => '40']) ?>
   <?= $this->submitTag($this->t('buttons.search')) ?>
 </form>
 

app/views/tag_alias/index.php

@@ -1,6 +1,6 @@
 <div style="margin-bottom: 1em;">
   <?= $this->formTag([], ['method' => 'get'], function(){ ?>
-    <?= $this->textFieldTag("query", $this->params()->query) ?>
+    <?= $this->textFieldTag("query", $this->h($this->params()->query)) ?>
     <?= $this->submitTag($this->t('.search')) ?>
     <?= $this->submitTag($this->t('tag_implication.index.search')) ?>
   <?php }) ?>

app/views/tag_implication/index.php

@@ -1,6 +1,6 @@
 <div style="margin-bottom: 1em;">
   <?= $this->formTag(['action' => "index"], ['method' => 'get'], function(){ ?>
-    <?= $this->textFieldTag("query", $this->params()->query) ?>
+    <?= $this->textFieldTag("query", $this->h($this->params()->query)) ?>
     <?= $this->submitTag($this->t('.search')) ?>
     <?= $this->submitTag($this->t('tag_alias.index.search')) ?>
   <?php }) ?>

app/views/wiki/_sidebar.php

@@ -2,7 +2,7 @@
   <div style="margin-bottom: 1em;">
     <h6>Search</h6>
     <?= $this->formTag(['action' => "index"], ['method' => "get"], function(){ ?>
-      <?= $this->textFieldTag("query", $this->params()->query, ['size' => 20, 'id' => "search-box"]) ?>
+      <?= $this->textFieldTag("query", $this->h($this->params()->query), ['size' => 20, 'id' => "search-box"]) ?>
     <?php }) ?>
   </div>