diff options
author | Stephen Beaver <sbeaver@netgate.com> | 2016-04-04 10:03:50 -0400 |
---|---|---|
committer | Stephen Beaver <sbeaver@netgate.com> | 2016-04-04 10:05:27 -0400 |
commit | 3cd510c543af86996ee78df89bbaa11e30b2490b (patch) | |
tree | 5f40eba308b17c817eba7dab0e886b11913d7f55 /src/usr/local/www | |
parent | 358b288458e6465fc73b836f4f84e0f0e10b329d (diff) | |
download | pfsense-3cd510c543af86996ee78df89bbaa11e30b2490b.zip pfsense-3cd510c543af86996ee78df89bbaa11e30b2490b.tar.gz |
Fixes corrupted display when special chars appear in the alias
(cherry picked from commit f14ec73c66c341464b9bd893175732b188049d24)
Diffstat (limited to 'src/usr/local/www')
-rw-r--r-- | src/usr/local/www/guiconfig.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/usr/local/www/guiconfig.inc b/src/usr/local/www/guiconfig.inc index 16d89db..7e1645a 100644 --- a/src/usr/local/www/guiconfig.inc +++ b/src/usr/local/www/guiconfig.inc @@ -310,7 +310,7 @@ function verify_gzip_file($fname) { // print_info_box() has been updated so that any required button is explicitly created, rather than relying on the detection of certain // strings in the message (such as "apply"). print_info_box_np() has been exterminated. // $class = the bootstrap style class (default, info, warning, success, danger) -// $btnname and btntext describe the optional button and its display text, the default is an 'x' Close button. +// $btnname and btntext describe the optional button and its display text, the default is an 'x' Close button. // Note that there is also a shortcut function print_apply_box here that creates a standard "apply" box for you. // In many cases just substitute that for print_info_box_np() to easily get a warning style "Apply changes" box. function print_info_box($msg, $class="alert-warning", $btnname = "close", $btntext = "", $btnicon = "", $btnclass = "default") { @@ -1112,7 +1112,7 @@ function alias_info_popup($alias_id) { $content .= $ap; $content .= " </td>\n"; $content .= " <td style='padding-left: 10px;'>\n"; - $content .= $alias_details[$idx]; + $content .= htmlspecialchars($alias_details[$idx]); $content .= " </td>\n"; $content .= " </tr>\n"; $idx++; |