From 896bcc5f1dd6da72aa81d884e4c57cef26135a71 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Fri, 4 Mar 2016 17:51:36 +0100
Subject: [PATCH] missing html escape

---
 src/www/load_balancer_pool_edit.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/www/load_balancer_pool_edit.php b/src/www/load_balancer_pool_edit.php
index 548c64697..7a32fb00d 100644
--- a/src/www/load_balancer_pool_edit.php
+++ b/src/www/load_balancer_pool_edit.php
@@ -160,7 +160,7 @@ include("head.inc");
       if (!empty($config['aliases']['alias'])):
         foreach ($config['aliases']['alias'] as $alias):
           if ($alias['type'] == 'port'):?>
-          <option data-type="<?=$alias['type'];?>" value="<?=$alias['name'];?>"><?=$alias['name'];?></option>
+          <option data-type="<?=$alias['type'];?>" value="<?=htmlspecialchars($alias['name']);?>"><?=htmlspecialchars($alias['name']);?></option>
   <?php
           endif;
         endforeach;