diff options
| author | jim-p <jimp@pfsense.org> | 2015-06-16 10:57:55 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2015-06-16 10:57:55 -0400 |
| commit | 2debaf5c34065aee52e4c095f4b120c5da518d3e (patch) | |
| tree | 28a79c5c674333a624367e207abbfc91562549e1 /usr/local/www/services_ntpd.php | |
| parent | 3aef3ad0c052443b1801ec216e1e6f87a6d984a8 (diff) | |
| download | pfsense-2debaf5c34065aee52e4c095f4b120c5da518d3e.zip pfsense-2debaf5c34065aee52e4c095f4b120c5da518d3e.tar.gz | |
Fix some low-hanging potential security issues.
Diffstat (limited to 'usr/local/www/services_ntpd.php')
| -rw-r--r-- | usr/local/www/services_ntpd.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/www/services_ntpd.php b/usr/local/www/services_ntpd.php index cea8ea6..1f4dd86 100644 --- a/usr/local/www/services_ntpd.php +++ b/usr/local/www/services_ntpd.php @@ -329,7 +329,7 @@ include("head.inc"); } echo ">\n"; - echo "<input name=\"server{$i}\" class=\"formfld unknown\" id=\"server{$i}\" size=\"30\" value=\"{$timeservers[$i]}\" type=\"text\" /> "; + echo "<input name=\"server{$i}\" class=\"formfld unknown\" id=\"server{$i}\" size=\"30\" value=\"" . htmlspecialchars($timeservers[$i]) . "\" type=\"text\" /> "; echo "\n<input name=\"servprefer{$i}\" class=\"formcheckbox\" id=\"servprefer{$i}\" onclick=\"CheckOffOther('servprefer{$i}', 'servselect{$i}')\" type=\"checkbox\""; if (isset($config['ntpd']['prefer']) && isset($timeservers[$i]) && substr_count($config['ntpd']['prefer'], $timeservers[$i])) { echo " checked=\"checked\""; |
