dmi3yy/evolution — pull request #148 by Jako (2013-10-17 12:23:09+00:00)
Title: Fixing Bug #8152

- Posting of html only allowed if &allowhtml=`1` and eform field type is html
- Prevent XSS by executing htmlspecialchars during formMerge on all form fields