diff options
| author | jim-p <jimp@pfsense.org> | 2017-02-07 11:14:25 -0500 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2017-02-07 11:14:59 -0500 |
| commit | ede8a9537ef9d15f8c1d288d9e89d4476a84656f (patch) | |
| tree | 15b4c039e2e940815401396b90382e2be5d91c6b | |
| parent | c1387957e842793a402b95a3c482c72ddd7a4c55 (diff) | |
| download | pfsense-ede8a9537ef9d15f8c1d288d9e89d4476a84656f.zip pfsense-ede8a9537ef9d15f8c1d288d9e89d4476a84656f.tar.gz | |
Encode 'from' and 'to' before output on pkg_mgr_install.php. Fixes #7225
| -rw-r--r-- | src/usr/local/www/pkg_mgr_install.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/usr/local/www/pkg_mgr_install.php b/src/usr/local/www/pkg_mgr_install.php index e5c1335..7fe2e49 100644 --- a/src/usr/local/www/pkg_mgr_install.php +++ b/src/usr/local/www/pkg_mgr_install.php @@ -318,7 +318,7 @@ if (!$confirmed && !$completed && <?php elseif ($_GET['from'] && $_GET['to']): ?> - <?=sprintf(gettext('Confirmation Required to upgrade package %1$s from %2$s to %3$s.'), $pkgname, $_GET['from'], $_GET['to'])?> + <?=sprintf(gettext('Confirmation Required to upgrade package %1$s from %2$s to %3$s.'), $pkgname, htmlspecialchars($_GET['from']), htmlspecialchars($_GET['to']))?> <?php elseif ($firmwareupdate): ?> |
