From 1f5b440c71fe9fc3d006b286eee997b3e267b95f Mon Sep 17 00:00:00 2001
From: Jamie Cameron <jcameron@webmin.com>
Date: Sun, 18 Oct 2026 10:59:17 -0700
Subject: [PATCH] Escape linktitle param for inclusion in the header

---
 logviewer/view_log.cgi | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/logviewer/view_log.cgi b/logviewer/view_log.cgi
index 152dd3c41..a93c313b5 100755
--- a/logviewer/view_log.cgi
+++ b/logviewer/view_log.cgi
@@ -150,7 +150,7 @@ $cmd_unpacked .= " | tac" if ($journal_tac);
 my $view_title = $in{'idx'} =~ /^journal/ ?
 	$text{'view_titlejournal'} : $text{'view_title'};
 &ui_print_header("<tt>".&html_escape($file || $cmd_unpacked)."</tt>",
-		 $in{'linktitle'} || $view_title, "", undef,
+		 &html_escape($in{'linktitle'}) || $view_title, "", undef,
 		 	!$no_navlinks && $skip_index,
 			($no_navlinks || $skip_index) ? 1 : undef,
 			0, $help_link);