From 3fa786eeb0ca81472ca3264d74e652aefe422db6 Mon Sep 17 00:00:00 2001
From: Jamie Cameron <jcameron@webmin.com>
Date: Fri, 20 Jul 2012 11:21:15 -0700
Subject: [PATCH] Escape visible values in select list

---
 ui-lib.pl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ui-lib.pl b/ui-lib.pl
index 1c1548869..9699071a9 100755
--- a/ui-lib.pl
+++ b/ui-lib.pl
@@ -857,7 +857,7 @@ foreach $o (@$opts) {
 	$o = [ $o ] if (!ref($o));
 	$rv .= "<option value=\"".&quote_escape($o->[0])."\"".
 	       ($sel{$o->[0]} ? " selected" : "")." ".$o->[2].">".
-	       ($o->[1] || $o->[0])."\n";
+	       &html_escape($o->[1] || $o->[0])."\n";
 	$opt{$o->[0]}++;
 	}
 foreach $s (keys %sel) {