From 2b39723a02572c00936463d689e3842f6bfd4bd2 Mon Sep 17 00:00:00 2001
From: Stanislas Kita <7335054+stonebuzz@users.noreply.github.com>
Date: Fri, 18 Sep 2026 15:23:12 +0200
Subject: [PATCH] Fix: escape asset name in the replacement form

---
 CHANGELOG.md          | 4 ++++
 inc/replace.class.php | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 96633dd..a163740 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [UNRELEASED]
 
+### Fixed
+
+- Display asset names correctly in the replacement form
+
 ## [2.10.5] - 2026-08-31
 
 ### Fixed
diff --git a/inc/replace.class.php b/inc/replace.class.php
index 15839d1..2bda125 100644
--- a/inc/replace.class.php
+++ b/inc/replace.class.php
@@ -868,7 +868,7 @@ public static function showReplacementForm($type, $model_id, $tab_ids, $location
                 $commonitem->getFromDB($id);
 
                 echo "<tr class='tab_bg_1 center'>";
-                echo "<td>" . $commonitem->getName() . "</td>";
+                echo "<td>" . htmlescape($commonitem->getName()) . "</td>";
 
                 if (Search::getOptionNumber($type, 'otherserial')) {
                     echo "<td>" . htmlentities((string) $commonitem->fields['otherserial']) . "</td>";