From f14ec73c66c341464b9bd893175732b188049d24 Mon Sep 17 00:00:00 2001 From: Stephen Beaver Date: Mon, 4 Apr 2016 10:03:50 -0400 Subject: Fixes corrupted display when special chars appear in the alias --- src/usr/local/www/guiconfig.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/usr/local/www/guiconfig.inc b/src/usr/local/www/guiconfig.inc index 16d89db..7e1645a 100644 --- a/src/usr/local/www/guiconfig.inc +++ b/src/usr/local/www/guiconfig.inc @@ -310,7 +310,7 @@ function verify_gzip_file($fname) { // print_info_box() has been updated so that any required button is explicitly created, rather than relying on the detection of certain // strings in the message (such as "apply"). print_info_box_np() has been exterminated. // $class = the bootstrap style class (default, info, warning, success, danger) -// $btnname and btntext describe the optional button and its display text, the default is an 'x' Close button. +// $btnname and btntext describe the optional button and its display text, the default is an 'x' Close button. // Note that there is also a shortcut function print_apply_box here that creates a standard "apply" box for you. // In many cases just substitute that for print_info_box_np() to easily get a warning style "Apply changes" box. function print_info_box($msg, $class="alert-warning", $btnname = "close", $btntext = "", $btnicon = "", $btnclass = "default") { @@ -1112,7 +1112,7 @@ function alias_info_popup($alias_id) { $content .= $ap; $content .= " \n"; $content .= " \n"; - $content .= $alias_details[$idx]; + $content .= htmlspecialchars($alias_details[$idx]); $content .= " \n"; $content .= " \n"; $idx++; -- cgit v1.1