From 80d94767a7f6dbb278ab1abfdba2ccc3c839a4fb Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Tue, 26 Feb 2019 20:16:00 +0100
Subject: [PATCH] firewall_schedule_edit.php, escape issues

---
 src/www/firewall_schedule_edit.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/www/firewall_schedule_edit.php b/src/www/firewall_schedule_edit.php
index c8e778ff0..572c5f99a 100644
--- a/src/www/firewall_schedule_edit.php
+++ b/src/www/firewall_schedule_edit.php
@@ -587,7 +587,7 @@ function addTimeRange(){
     + stoptimemin;
 
     //get description for time range
-    tempdescr = document.getElementById("timerangedescr").value;
+    tempdescr = escape(document.getElementById("timerangedescr").value);
 
     if (nonrepeatingfound){
       nrtempTime += nrtempID;
@@ -715,7 +715,7 @@ function editRow(incTime, el) {
 
     days = tempArray[0];
     hours = tempArray[1];
-    descr = tempArray[2];
+    descr = escape(tempArray[2]);
 
     var tempdayArray = days.split(",");
     var temphourArray = hours.split("-");