From 0d458903176fc2ba26969dfd4001402274dde62f Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Wed, 1 Jul 2015 11:10:48 -0400
Subject: [PATCH] Encode cert/ca descr in system_advanced_admin.php

---
 usr/local/www/system_advanced_admin.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/usr/local/www/system_advanced_admin.php b/usr/local/www/system_advanced_admin.php
index 99588c29c1..a449452e01 100644
--- a/usr/local/www/system_advanced_admin.php
+++ b/usr/local/www/system_advanced_admin.php
@@ -381,7 +381,7 @@ function prot_change() {
 													$selected = "selected=\"selected\"";
 												}
 										?>
-										<option value="<?=$cert['refid'];?>" <?=$selected;?>><?=$cert['descr'];?></option>
+										<option value="<?=$cert['refid'];?>" <?=$selected;?>><?=htmlspecialchars($cert['descr']);?></option>
 										<?php
 											endforeach;
 											if (!count($a_cert)) {