From 8aedc0f0d3ae8e542979fdfadf7a88dbef9f9c72 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Thu, 18 Jul 2019 12:59:35 +0200
Subject: [PATCH] filter, rules page. html escape dynamic entries to display
 aliases. ref https://github.com/opnsense/core/issues/3581

---
 src/www/firewall_rules.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/www/firewall_rules.php b/src/www/firewall_rules.php
index 63a96ef40..a772d1c01 100644
--- a/src/www/firewall_rules.php
+++ b/src/www/firewall_rules.php
@@ -634,6 +634,7 @@ $( document ).ready(function() {
                 foreach ($fw->iterateFilterRules() as $rule):
                     if ($rule->getInterface() == $selected_if && $rule->isEnabled()):
                         $filterent = $rule->getRawRule();
+                        legacy_html_escape_form_data($filterent);
                         $rule_stats = !empty($rule->getLabel()) ? $all_rule_stats[$rule->getLabel()] : array();?>
                     <tr class="internal-rule" style="display: none;">
                       <td><i class="fa fa-magic"></i></td>