summaryrefslogtreecommitdiffstats
path: root/usr
diff options
context:
space:
mode:
authorJim P <jim@pingle.org>2013-03-08 11:13:05 -0800
committerJim P <jim@pingle.org>2013-03-08 11:13:05 -0800
commit6e0fc523c1ab3a09bbbcdb573ac3e1efc859599d (patch)
treea72c1c383eff0fbdd34e9bfda69410a994a9b1fe /usr
parent60cd18648c3d00d480b877808f53634cbd9adbc9 (diff)
parenta1560c1bb44cfa1ac540203adda2c9224ac0e29c (diff)
downloadpfsense-6e0fc523c1ab3a09bbbcdb573ac3e1efc859599d.zip
pfsense-6e0fc523c1ab3a09bbbcdb573ac3e1efc859599d.tar.gz
Merge pull request #479 from ExolonDX/master
Use HTMLENTITIES to deprecate the ampersand in page title URI
Diffstat (limited to 'usr')
-rwxr-xr-xusr/local/www/fbegin.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/www/fbegin.inc b/usr/local/www/fbegin.inc
index b8414b3..a25e168 100755
--- a/usr/local/www/fbegin.inc
+++ b/usr/local/www/fbegin.inc
@@ -379,7 +379,7 @@ function add_to_menu($url, $name) {
?>
<div>
-<span class="pgtitle"><a href="<?= $_SERVER['REQUEST_URI'] ?>"><?=genhtmltitle($pgtitle);?></a></span>
+<span class="pgtitle"><a href="<?= htmlentities($_SERVER['REQUEST_URI']) ?>"><?=genhtmltitle($pgtitle);?></a></span>
<span style="float:right; margin: 0 0 20px 20px">
<?php
if (!$hide_service_status && !empty($shortcuts[$shortcut_section]['service'])) {
OpenPOWER on IntegriCloud