Encode the rule description before displaying back to the user in an error when attempting to delete an in-use alias.

This commit is contained in:
jim-p 2015-09-01 12:17:02 -04:00
parent 1107259e9c
commit 1782b45d4b

View File

@ -106,7 +106,7 @@ if ($_GET['act'] == "del") {
// Static routes
find_alias_reference(array('staticroutes', 'route'), array('network'), $alias_name, $is_alias_referenced, $referenced_by);
if($is_alias_referenced == true) {
$savemsg = sprintf(gettext("Cannot delete alias. Currently in use by %s"), $referenced_by);
$savemsg = sprintf(gettext("Cannot delete alias. Currently in use by %s"), htmlspecialchars($referenced_by));
} else {
unset($a_aliases[$_GET['id']]);
if (write_config()) {