missing html escape

This commit is contained in:
Ad Schellevis 2016-03-04 17:51:36 +01:00
parent fbb98523ff
commit 896bcc5f1d

View File

@ -160,7 +160,7 @@ include("head.inc");
if (!empty($config['aliases']['alias'])):
foreach ($config['aliases']['alias'] as $alias):
if ($alias['type'] == 'port'):?>
<option data-type="<?=$alias['type'];?>" value="<?=$alias['name'];?>"><?=$alias['name'];?></option>
<option data-type="<?=$alias['type'];?>" value="<?=htmlspecialchars($alias['name']);?>"><?=htmlspecialchars($alias['name']);?></option>
<?php
endif;
endforeach;