standardForm.xss.patch

Index: standardForm.php
===================================================================
--- standardForm.php	(revision 1)
+++ standardForm.php	(working copy)
@@ -4,7 +4,7 @@
 	<?php if (isset($_GET['chooser'])) {
 		echo '<input type="hidden" name="chooser" value="true" />';
 	} ?>
-	<input style="width:18ex;" type="text" value="<?php echo @$_GET['q']; ?>" id="q" name="q" /> 
+	<input style="width:18ex;" type="text" value="<?php echo htmlspecialchars(@$_GET['q']); ?>" id="q" name="q" /> 
 	<input style="margin-bottom:-7px;" name="submitbutton" type="image" src="/ucomm/templatedependents/templatecss/images/go.gif" value="Submit" id="submitbutton" />
 	</div> 
-</form>
\ No newline at end of file
+</form>