summaryrefslogtreecommitdiffstats
path: root/usr/local/www/vpn_openvpn_csc.php
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2015-06-16 10:53:04 -0400
committerjim-p <jimp@pfsense.org>2015-06-16 10:53:04 -0400
commitd213c48520c6d694e660b208340e4e632e153585 (patch)
tree5475b31f9415204e5c883a1d01a1459b5d309f8c /usr/local/www/vpn_openvpn_csc.php
parent621baeb604d1125e10222a70ba9a7efa85eff22b (diff)
downloadpfsense-d213c48520c6d694e660b208340e4e632e153585.zip
pfsense-d213c48520c6d694e660b208340e4e632e153585.tar.gz
Fix some low-hanging potential security issues.
Diffstat (limited to 'usr/local/www/vpn_openvpn_csc.php')
-rw-r--r--usr/local/www/vpn_openvpn_csc.php8
1 files changed, 4 insertions, 4 deletions
diff --git a/usr/local/www/vpn_openvpn_csc.php b/usr/local/www/vpn_openvpn_csc.php
index 5aa6dbd..e1c84b3 100644
--- a/usr/local/www/vpn_openvpn_csc.php
+++ b/usr/local/www/vpn_openvpn_csc.php
@@ -602,7 +602,7 @@ function netbios_change() {
<span class="vexpl">
<?=gettext("Server"); ?> #1:&nbsp;
</span>
- <input name="ntp_server1" type="text" class="formfld unknown" id="ntp_server1" size="20" value="<?=$pconfig['ntp_server1'];?>" />
+ <input name="ntp_server1" type="text" class="formfld unknown" id="ntp_server1" size="20" value="<?=htmlspecialchars($pconfig['ntp_server1']);?>" />
</td>
</tr>
<tr>
@@ -610,7 +610,7 @@ function netbios_change() {
<span class="vexpl">
<?=gettext("Server"); ?> #2:&nbsp;
</span>
- <input name="ntp_server2" type="text" class="formfld unknown" id="ntp_server2" size="20" value="<?=$pconfig['ntp_server2'];?>" />
+ <input name="ntp_server2" type="text" class="formfld unknown" id="ntp_server2" size="20" value="<?=htmlspecialchars($pconfig['ntp_server2']);?>" />
</td>
</tr>
</table>
@@ -698,7 +698,7 @@ function netbios_change() {
<span class="vexpl">
<?=gettext("Server"); ?> #1:&nbsp;
</span>
- <input name="wins_server1" type="text" class="formfld unknown" id="wins_server1" size="20" value="<?=$pconfig['wins_server1'];?>" />
+ <input name="wins_server1" type="text" class="formfld unknown" id="wins_server1" size="20" value="<?=htmlspecialchars($pconfig['wins_server1']);?>" />
</td>
</tr>
<tr>
@@ -706,7 +706,7 @@ function netbios_change() {
<span class="vexpl">
<?=gettext("Server"); ?> #2:&nbsp;
</span>
- <input name="wins_server2" type="text" class="formfld unknown" id="wins_server2" size="20" value="<?=$pconfig['wins_server2'];?>" />
+ <input name="wins_server2" type="text" class="formfld unknown" id="wins_server2" size="20" value="<?=htmlspecialchars($pconfig['wins_server2']);?>" />
</td>
</tr>
</table>
OpenPOWER on IntegriCloud