sec: don't pass user string to format print directly

hanatos · Oct 5, 2024 · 84e48df · 84e48df
1 parent 0b0cb70
commit 84e48df
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/gui/render_lighttable.c b/src/gui/render_lighttable.c
@@ -748,6 +748,7 @@ void render_lighttable_right_panel()
               {
                 day[day_cnt][10] = 0;
                 strncpy(day[day_cnt], createdate, 10);
+                dt_sanitize_user_string(day[day_cnt]);
                 day_cnt++;
               }
             }