From 2ce606e15a6affac120b185ae5430b959f4cae5f Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Wed, 1 Jul 2015 11:13:40 -0400
Subject: Encode ca/cert descr in system_authservers.php

---
 usr/local/www/system_authservers.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'usr/local')

diff --git a/usr/local/www/system_authservers.php b/usr/local/www/system_authservers.php
index 2588dda..a58ef0e 100644
--- a/usr/local/www/system_authservers.php
+++ b/usr/local/www/system_authservers.php
@@ -540,7 +540,7 @@ function select_clicked() {
                                                                         if ($pconfig['ldap_caref'] == $ca['refid'])
                                                                                 $selected = "selected=\"selected\"";
                                                         ?>
-									<option value="<?=$ca['refid'];?>" <?=$selected;?>><?=$ca['descr'];?></option>
+									<option value="<?=$ca['refid'];?>" <?=$selected;?>><?=htmlspecialchars($ca['descr']);?></option>
                                                         <?php	endforeach; ?>
 								</select>
 								<br /><span><?=gettext("This option is used if 'SSL Encrypted' option is choosen.");?> <br />
-- 
cgit v1.1