From 987c1904f7145971ee34e36c947c6c3a3237af77 Mon Sep 17 00:00:00 2001
From: opencode <opencode@anomaly.ai>
Date: Fri, 3 Apr 2026 08:54:55 +0000
Subject: [PATCH] Fix textarea value attribute in message_config.php

- Textarea elements don't support value attribute, content must be between tags
- Added esc() around the content for XSS protection
---
 app/Views/configs/message_config.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/Views/configs/message_config.php b/app/Views/configs/message_config.php
index f29e1efc5..f8d93b06e 100644
--- a/app/Views/configs/message_config.php
+++ b/app/Views/configs/message_config.php
@@ -42,7 +42,7 @@
     <label for="msg-msg" class="form-label"><?= lang('Config.msg_msg'); ?></label>
     <div class="input-group mb-3">
         <span class="input-group-text"><i class="bi bi-chat-quote"></i></span>
-        <textarea class="form-control" name="msg_msg" id="msg-msg" rows="10" placeholder="<?= lang('Config.msg_msg_placeholder'); ?>" value="<?= $config['msg_msg']; ?>"></textarea>
+        <textarea class="form-control" name="msg_msg" id="msg-msg" rows="10" placeholder="<?= lang('Config.msg_msg_placeholder'); ?>"><?= esc($config['msg_msg']); ?></textarea>
     </div>
 
     <div class="d-flex justify-content-end">