escape logged commands

This commit is contained in:
Jamie Cameron
2020-02-10 14:47:34 -08:00
parent f9406d5487
commit b98c2a1804

View File

@@ -9,7 +9,7 @@ sub parse_webmin_log
{ {
local ($user, $script, $action, $type, $object, $p) = @_; local ($user, $script, $action, $type, $object, $p) = @_;
if ($action eq "run") { if ($action eq "run") {
return &text('log_run', "<tt>$p->{'cmd'}</tt>"); return &text('log_run', "<tt>".&html_escape($p->{'cmd'})."</tt>");
} }
elsif ($action eq "clear") { elsif ($action eq "clear") {
return $text{'log_clear'}; return $text{'log_clear'};