summaryrefslogtreecommitdiffstats
path: root/src/usr/local/www/head.inc
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2015-12-21 10:29:40 -0500
committerjim-p <jimp@pfsense.org>2015-12-21 10:29:40 -0500
commit8ae9a909901ddb13306e6ac494240ff1fa720c4d (patch)
tree84a5b2efdc4111a79732ebd5cdb3231f30b0d516 /src/usr/local/www/head.inc
parent934b307814786250e1b3110030996d8166197a1d (diff)
downloadpfsense-8ae9a909901ddb13306e6ac494240ff1fa720c4d.zip
pfsense-8ae9a909901ddb13306e6ac494240ff1fa720c4d.tar.gz
Encode hostname before printing; remove some related dead code.
Diffstat (limited to 'src/usr/local/www/head.inc')
-rwxr-xr-xsrc/usr/local/www/head.inc4
1 files changed, 2 insertions, 2 deletions
diff --git a/src/usr/local/www/head.inc b/src/usr/local/www/head.inc
index 619141b..c8e99dd 100755
--- a/src/usr/local/www/head.inc
+++ b/src/usr/local/www/head.inc
@@ -61,9 +61,9 @@ header('Content-Type: text/html; charset=utf-8');
$pagetitle = gentitle($pgtitle);
if (isset($config['system']['webgui']['pagenamefirst'])) {
- $tabtitle = $pagetitle . " - " . $config['system']['hostname'] . "." . $config['system']['domain'];
+ $tabtitle = $pagetitle . " - " . htmlspecialchars($config['system']['hostname'] . "." . $config['system']['domain']);
} else {
- $tabtitle = $config['system']['hostname'] . "." . $config['system']['domain'] . " - " . $pagetitle;
+ $tabtitle = htmlspecialchars($config['system']['hostname'] . "." . $config['system']['domain']) . " - " . $pagetitle;
}
$cssfile = "/bootstrap/css/pfSense.css";
OpenPOWER on IntegriCloud