mirror of
https://github.com/webmin/webmin.git
synced 2026-02-03 06:03:28 +00:00
Fix missing HTML escapes for select option
This commit is contained in:
@@ -996,13 +996,13 @@ foreach $o (@$opts) {
|
||||
$o = [ $o ] if (!ref($o));
|
||||
$rv .= "<option value=\""."e_escape($o->[0])."\"".
|
||||
($sel{$o->[0]} ? " selected" : "").($o->[2] ne '' ? " ".$o->[2] : "").">".
|
||||
($o->[1] || $o->[0])."</option>\n";
|
||||
&html_escape($o->[1] || $o->[0])."</option>\n";
|
||||
$opt{$o->[0]}++;
|
||||
}
|
||||
foreach $s (keys %sel) {
|
||||
if (!$opt{$s} && $missing) {
|
||||
$rv .= "<option value=\""."e_escape($s)."\"".
|
||||
" selected>".($s eq "" ? " " : $s)."</option>\n";
|
||||
" selected>".($s eq "" ? " " : &html_escape($s))."</option>\n";
|
||||
}
|
||||
}
|
||||
$rv .= "</select>\n";
|
||||
|
||||
Reference in New Issue
Block a user