From 5b5bb2483cd955084809e877d56e620fe433dd1d Mon Sep 17 00:00:00 2001
From: jim-p <jimp@netgate.com>
Date: Wed, 8 May 2019 16:44:26 -0400
Subject: [PATCH] Encode descr in the WOL widget. Fixes #9507

(cherry picked from commit 5789a02eab9b2ebbcb1f28d1d037b408b436a853)
---
 src/usr/local/www/widgets/widgets/wake_on_lan.widget.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/usr/local/www/widgets/widgets/wake_on_lan.widget.php b/src/usr/local/www/widgets/widgets/wake_on_lan.widget.php
index 3d6a079460..bf255561c4 100644
--- a/src/usr/local/www/widgets/widgets/wake_on_lan.widget.php
+++ b/src/usr/local/www/widgets/widgets/wake_on_lan.widget.php
@@ -84,7 +84,7 @@ if (count($wolcomputers) > 0):
 		?>
 		<tr>
 			<td>
-				<?= $wolent['descr'] ?><br />
+				<?= htmlspecialchars($wolent['descr']) ?><br />
 				<?= $wolent['mac'] ?>
 			</td>
 			<td>
@@ -161,7 +161,7 @@ if (is_array($config['dhcpd'])) {
 				foreach ($wolcomputers as $wolent):
 ?>
 						<tr>
-							<td><?=$wolent['descr']?></td>
+							<td><?=htmlspecialchars($wolent['descr'])?></td>
 							<td><?=convert_friendly_interface_to_friendly_descr($wolent['interface'])?></td>
 							<td><?=$wolent['mac']?></td>
 							<td class="col-sm-2"><input id="show[]" name ="show[]" value="<?=get_wolent_key($wolent)?>" type="checkbox" <?=(!in_array(get_wolent_key($wolent), $skipwols) ? 'checked':'')?>></td>