Added object's DN escape in links's URL

diff --git a/public_html/templates/default/LSformElement_select_object_field.tpl b/public_html/templates/default/LSformElement_select_object_field.tpl
index 85e26b0..f132dd7 100644 (file)
--- a/public_html/templates/default/LSformElement_select_object_field.tpl
+++ b/public_html/templates/default/LSformElement_select_object_field.tpl
@@ -1,5 +1,5 @@
 {if $dn}
-  <a href='view.php?LSobject={$selectableObject}&amp;dn={$dn}' class='LSformElement_select_object'>{$txt}</a>
+  <a href='view.php?LSobject={$selectableObject}&amp;dn={$dn|escape:'url'}' class='LSformElement_select_object'>{$txt}</a>
   {if !$freeze}<input type='hidden' class='LSformElement_select_object' name='{$attr_name}[]' value='{$dn}' />{/if}
 {else}
   {$noValueTxt}