From 76e3f194eb6d56728e4f031b61759990f6fd4538 Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Wed, 1 Jul 2015 11:11:52 -0400
Subject: Encode ca/cert descr in system_usermanager.php

---
 usr/local/www/system_usermanager.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'usr/local/www')

diff --git a/usr/local/www/system_usermanager.php b/usr/local/www/system_usermanager.php
index 1bc91ad..0744dbb 100644
--- a/usr/local/www/system_usermanager.php
+++ b/usr/local/www/system_usermanager.php
@@ -808,7 +808,7 @@ function sshkeyClicked(obj) {
 													continue;
 												$rowIndex++;
 ?>
-												<option value="<?=$ca['refid'];?>"><?=$ca['descr'];?></option>
+												<option value="<?=$ca['refid'];?>"><?=htmlspecialchars($ca['descr']);?></option>
 <?php
 											endforeach;
 											if ($rowIndex == 0)
-- 
cgit v1.1