Injection Attack Security

In this file: easy_breadcrumb.blocks.inc

There is this php code:

$breadcrumb[] = '<span class="' . $classes . '">' . $segment_text . '</span>';

If a user goes to a page that doesn't exist, and if JS or HTML is included in the url, it will print this code straight onto the page. It should be updated to this:

$breadcrumb[] = '<span class="' . $classes . '">' . htmlspecialchars($segment_text) . '</span>';

We ran into this issue trying to get PCI compliance on a site that uses this module.