From 25dc1bb059677bfe38fc6f3233a5dfaf686ab5d1 Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Mon, 21 Jan 2013 09:33:25 -0500
Subject: Run IPsec logs through htmlspecialchars before display.

---
 usr/local/www/diag_logs_ipsec.php | 1 +
 1 file changed, 1 insertion(+)

(limited to 'usr/local')

diff --git a/usr/local/www/diag_logs_ipsec.php b/usr/local/www/diag_logs_ipsec.php
index 9b10719..749cac1 100755
--- a/usr/local/www/diag_logs_ipsec.php
+++ b/usr/local/www/diag_logs_ipsec.php
@@ -125,6 +125,7 @@ include("head.inc");
 		  		</tr>
 				<?php
 				foreach($ipsec_logarr as $logent){
+					$logent = htmlspecialchars($logent);
 					foreach($search as $string) {
 						if(preg_match($string, $logent))
 							$match = true;
-- 
cgit v1.1