diff options
| author | jim-p <jimp@pfsense.org> | 2015-06-16 10:10:58 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2015-06-16 10:10:58 -0400 |
| commit | 3aef3ad0c052443b1801ec216e1e6f87a6d984a8 (patch) | |
| tree | 754824e445644a0311fbc040c3b7a0069bb45510 /usr/local/www/services_captiveportal.php | |
| parent | 1cdfcaf40d8bf08f2e42837813f950415e1e3532 (diff) | |
| download | pfsense-3aef3ad0c052443b1801ec216e1e6f87a6d984a8.zip pfsense-3aef3ad0c052443b1801ec216e1e6f87a6d984a8.tar.gz | |
Be more careful with encoding on pages that use single quotes around HTML attributes
Diffstat (limited to 'usr/local/www/services_captiveportal.php')
| -rw-r--r-- | usr/local/www/services_captiveportal.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/www/services_captiveportal.php b/usr/local/www/services_captiveportal.php index 58da087..4896be8 100644 --- a/usr/local/www/services_captiveportal.php +++ b/usr/local/www/services_captiveportal.php @@ -1220,7 +1220,7 @@ function enable_change(enable_change) { <tr> <td width="22%" valign="top"> </td> <td width="78%"> - <?php echo "<input name='zone' id='zone' type='hidden' value='" . htmlspecialchars($cpzone) . "' />"; ?> + <?php echo "<input name='zone' id='zone' type='hidden' value='" . htmlspecialchars($cpzone, ENT_QUOTES | ENT_HTML401) . "' />"; ?> <input name="Submit" type="submit" class="formbtn" value="<?=gettext("Save"); ?>" onclick="enable_change(true)" /> <a href="services_captiveportal_zones.php"><input name="Cancel" type="button" class="formbtn" value="<?=gettext("Cancel"); ?>" onclick="enable_change(true)" /></a> </td> |
