diff options
| author | jim-p <jimp@pfsense.org> | 2015-06-16 10:10:58 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2015-06-16 10:10:58 -0400 |
| commit | 3aef3ad0c052443b1801ec216e1e6f87a6d984a8 (patch) | |
| tree | 754824e445644a0311fbc040c3b7a0069bb45510 /usr/local/www/system_hasync.php | |
| parent | 1cdfcaf40d8bf08f2e42837813f950415e1e3532 (diff) | |
| download | pfsense-3aef3ad0c052443b1801ec216e1e6f87a6d984a8.zip pfsense-3aef3ad0c052443b1801ec216e1e6f87a6d984a8.tar.gz | |
Be more careful with encoding on pages that use single quotes around HTML attributes
Diffstat (limited to 'usr/local/www/system_hasync.php')
| -rwxr-xr-x | usr/local/www/system_hasync.php | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/usr/local/www/system_hasync.php b/usr/local/www/system_hasync.php index 3426404..1ce81e6 100755 --- a/usr/local/www/system_hasync.php +++ b/usr/local/www/system_hasync.php @@ -143,7 +143,7 @@ include("head.inc"); <tr valign="top"> <td width="22%" class="vncell">pfsync Synchronize Peer IP</td> <td class="vtable"> - <input id='pfsyncpeerip' name='pfsyncpeerip' class='formfld unknown' value='<?= htmlentities($pconfig['pfsyncpeerip']); ?>' /> + <input id='pfsyncpeerip' name='pfsyncpeerip' class='formfld unknown' value='<?= htmlentities($pconfig['pfsyncpeerip'], ENT_QUOTES | ENT_HTML401); ?>' /> <br /> Setting this option will force pfsync to synchronize its state table to this IP address. The default is directed multicast. </td> @@ -157,7 +157,7 @@ include("head.inc"); <tr valign="top"> <td width="22%" class="vncell">Synchronize Config to IP</td> <td class="vtable"> - <input id='synchronizetoip' name='synchronizetoip' class='formfld unknown' value='<?= htmlentities($pconfig['synchronizetoip']); ?>' /> + <input id='synchronizetoip' name='synchronizetoip' class='formfld unknown' value='<?= htmlentities($pconfig['synchronizetoip'], ENT_QUOTES | ENT_HTML401); ?>' /> <br /> Enter the IP address of the firewall to which the selected configuration sections should be synchronized.<br /> <br /> @@ -169,7 +169,7 @@ include("head.inc"); <tr valign="top"> <td width="22%" class="vncell">Remote System Username</td> <td class="vtable"> - <input id='username' name='username' class='formfld unknown' value='<?= htmlentities($pconfig['username']); ?>' /> + <input id='username' name='username' class='formfld unknown' value='<?= htmlentities($pconfig['username'], ENT_QUOTES | ENT_HTML401); ?>' /> <br /> Enter the webConfigurator username of the system entered above for synchronizing your configuration.<br /> <br /> @@ -179,7 +179,7 @@ include("head.inc"); <tr valign="top"> <td width="22%" class="vncell">Remote System Password</td> <td class="vtable"> - <input id='passwordfld' type='password' name='passwordfld' class='formfld pwd' value='<?= htmlentities($pconfig['passwordfld']); ?>' /> + <input id='passwordfld' type='password' name='passwordfld' class='formfld pwd' value='<?= htmlentities($pconfig['passwordfld'], ENT_QUOTES | ENT_HTML401); ?>' /> <br /> Enter the webConfigurator password of the system entered above for synchronizing your configuration.<br /> <br /> |
