Fix a potential XSS in voucher testing.

1 files changed, 2 insertions, 2 deletions

diff --git a/usr/local/www/status_captiveportal_test.php b/usr/local/www/status_captiveportal_test.php
index 4caafb4..ddb5b43 100644
--- a/usr/local/www/status_captiveportal_test.php
+++ b/usr/local/www/status_captiveportal_test.php
@@ -108,10 +108,10 @@ if ($_POST) {
         foreach ($test_results as $result) {
             if (strpos($result, " good ") || strpos($result, " granted ")) {
                 echo "<tr><td bgcolor=\"#D9DEE8\"><img src=\"/themes/{$g['theme']}/images/icons/icon_pass.gif\" alt=\"pass\" /></td>";
-                echo "<td bgcolor=\"#D9DEE8\">$result</td></tr>";
+                echo "<td bgcolor=\"#D9DEE8\">" . htmlspecialchars($result) . "</td></tr>";
             } else {
                 echo "<tr><td bgcolor=\"#FFD9D1\"><img src=\"/themes/{$g['theme']}/images/icons/icon_block.gif\" alt=\"block\" /></td>";
-                echo "<td bgcolor=\"#FFD9D1\">$result</td></tr>";
+                echo "<td bgcolor=\"#FFD9D1\">" . htmlspecialchars($result) . "</td></tr>";
             }
         }
         echo "</table>";