summaryrefslogtreecommitdiffstats
path: root/usr/local/www
diff options
context:
space:
mode:
authorRenato Botelho <garga@FreeBSD.org>2014-02-17 10:23:34 -0300
committerRenato Botelho <garga@FreeBSD.org>2014-02-17 11:11:33 -0300
commitacbab51a8c2fbdbcc41c96090afa71b8b57db68e (patch)
tree32c76a01fe8fce57027324fa84379e598a9eeefa /usr/local/www
parenta8495e500aec7fed36e1a90673298622b14f254e (diff)
downloadpfsense-acbab51a8c2fbdbcc41c96090afa71b8b57db68e.zip
pfsense-acbab51a8c2fbdbcc41c96090afa71b8b57db68e.tar.gz
Use htmlspecialchars(), a better solution for #2952
Diffstat (limited to 'usr/local/www')
-rwxr-xr-xusr/local/www/system_firmware_check.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/www/system_firmware_check.php b/usr/local/www/system_firmware_check.php
index 0cf9923..544a54d 100755
--- a/usr/local/www/system_firmware_check.php
+++ b/usr/local/www/system_firmware_check.php
@@ -181,7 +181,7 @@ if ($g['platform'] == "nanobsd") {
$txt .= " " . gettext("NanoBSD Size") . " : " . trim(file_get_contents("/etc/nanosize.txt")) . "\\n";
}
$txt .= " " . gettext("Built On") .": ". $current_installed_buildtime . "\\n";
-$txt .= " " . gettext("New version") .": ". addslashes($remote_version) . "\\n\\n";
+$txt .= " " . gettext("New version") .": ". htmlspecialchars($remote_version, ENT_QUOTES | ENT_HTML401). "\\n\\n";
$txt .= " " . gettext("Update source") .": ". $updater_url . "\\n";
update_output_window($txt);
?>
OpenPOWER on IntegriCloud