fix(targetticket,targetchange): escape text fields of targets

Signed-off-by: Thierry Bugier <[email protected]>

Author: btry

inc/targetchange.class.php

@@ -171,6 +171,10 @@ public static function import(PluginFormcreatorLinker $linker, $input = [], $con
          );
       }
 
+      // Escape text fields
+      foreach (['target_name'] as $key) {
+         $input[$key] = $DB->escape($input[$key]);
+      }
 
       // Assume that all questions are already imported
       // convert question uuid into id

inc/targetticket.class.php

@@ -897,6 +897,10 @@ public static function import(PluginFormcreatorLinker $linker, $input = [], $con
          );
       }
 
+      // Escape text fields
+      foreach (['target_name'] as $key) {
+         $input[$key] = $DB->escape($input[$key]);
+      }
 
       // Assume that all questions are already imported
       // convert question uuid into id