thumb.php: Set ENT_NOQUOTES for htmlspecialchars
authorFomafix <fomafix@googlemail.com>
Thu, 9 Nov 2017 11:02:18 +0000 (12:02 +0100)
committerFomafix <fomafix@googlemail.com>
Thu, 9 Nov 2017 11:02:18 +0000 (12:02 +0100)
commit84bb8c424078af81e5209f0f78d2de84b179b24b
tree633926bec4882502849784506c9e0aad6a00a61b
parentfdd862b6f04b1847379261fe448db662a91a00a0
thumb.php: Set ENT_NOQUOTES for htmlspecialchars

There is no need to escape double quotes in content of HTML and in HTML
comments.

ENT_NOQUOTES escapes '<', '>', '&' but not "'" and '"'.
https://secure.php.net/manual/en/function.htmlspecialchars.php

Change-Id: I7146df9582fc1d9742b9e1b0e4f03d7c7d2ed91f
thumb.php