diff options
author | Stephen Beaver <sbeaver@netgate.com> | 2016-04-04 10:03:50 -0400 |
---|---|---|
committer | Stephen Beaver <sbeaver@netgate.com> | 2016-04-04 10:03:50 -0400 |
commit | f14ec73c66c341464b9bd893175732b188049d24 (patch) | |
tree | 772bab42f7fe50eb5307558b1a371aee31d2cd22 /src | |
parent | 4012d55c028ca1c4d449e7b80ba738d4dd5b2976 (diff) | |
download | pfsense-f14ec73c66c341464b9bd893175732b188049d24.zip pfsense-f14ec73c66c341464b9bd893175732b188049d24.tar.gz |
Fixes corrupted display when special chars appear in the alias
Diffstat (limited to 'src')
-rw-r--r-- | src/usr/local/www/guiconfig.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/usr/local/www/guiconfig.inc b/src/usr/local/www/guiconfig.inc index 16d89db..7e1645a 100644 --- a/src/usr/local/www/guiconfig.inc +++ b/src/usr/local/www/guiconfig.inc @@ -310,7 +310,7 @@ function verify_gzip_file($fname) { // print_info_box() has been updated so that any required button is explicitly created, rather than relying on the detection of certain // strings in the message (such as "apply"). print_info_box_np() has been exterminated. // $class = the bootstrap style class (default, info, warning, success, danger) -// $btnname and btntext describe the optional button and its display text, the default is an 'x' Close button. +// $btnname and btntext describe the optional button and its display text, the default is an 'x' Close button. // Note that there is also a shortcut function print_apply_box here that creates a standard "apply" box for you. // In many cases just substitute that for print_info_box_np() to easily get a warning style "Apply changes" box. function print_info_box($msg, $class="alert-warning", $btnname = "close", $btntext = "", $btnicon = "", $btnclass = "default") { @@ -1112,7 +1112,7 @@ function alias_info_popup($alias_id) { $content .= $ap; $content .= " </td>\n"; $content .= " <td style='padding-left: 10px;'>\n"; - $content .= $alias_details[$idx]; + $content .= htmlspecialchars($alias_details[$idx]); $content .= " </td>\n"; $content .= " </tr>\n"; $idx++; |