Ensure the current RRD graph category is encoded before display

This commit is contained in:
jim-p 2015-08-27 09:29:40 -04:00
parent 05da124c0c
commit 5bf478ac2e

View File

@ -409,7 +409,7 @@ function get_dates($curperiod, $graph) {
<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="rrd graphs">
<tr>
<td>
<input type="hidden" name="cat" value="<?php echo "$curcat"; ?>" />
<input type="hidden" name="cat" value="<?php echo htmlspecialchars($curcat); ?>" />
<?php
$tab_array = array();
if($curcat == "system") { $tabactive = True; } else { $tabactive = False; }