Fixes corrupted display when special chars appear in the alias

1 files changed, 2 insertions, 2 deletions

diff --git a/src/usr/local/www/guiconfig.inc b/src/usr/local/www/guiconfig.inc
index 16d89db..7e1645a 100644
--- a/src/usr/local/www/guiconfig.inc
+++ b/src/usr/local/www/guiconfig.inc
@@ -310,7 +310,7 @@ function verify_gzip_file($fname) {
 // print_info_box() has been updated so that any required button is explicitly created, rather than relying on the detection of certain
 // strings in the message (such as "apply"). print_info_box_np() has been exterminated.
 // $class = the bootstrap style class (default, info, warning, success, danger)
-// $btnname and btntext describe the optional button and its display text, the default is an 'x' Close button. 
+// $btnname and btntext describe the optional button and its display text, the default is an 'x' Close button.
 // Note that there is also a shortcut function print_apply_box here that creates a standard "apply" box for you.
 // In many cases just substitute that for print_info_box_np() to easily get a warning style "Apply changes" box.
 function print_info_box($msg, $class="alert-warning", $btnname = "close", $btntext = "", $btnicon = "", $btnclass = "default") {
@@ -1112,7 +1112,7 @@ function alias_info_popup($alias_id) {
 			$content .= 			$ap;
 			$content .=	"		</td>\n";
 			$content .= "		<td style='padding-left: 10px;'>\n";
-			$content .= 			$alias_details[$idx];
+			$content .= 			htmlspecialchars($alias_details[$idx]);
 			$content .=	"		</td>\n";
 			$content .= "	</tr>\n";
 			$idx++;