From 809e196a0d7bd1744a960fe09ac55b977e8dce87 Mon Sep 17 00:00:00 2001 From: jim-p Date: Thu, 21 Nov 2019 16:22:51 -0500 Subject: [PATCH] CDATA escape more auth-related fields. Fixes #9327 (cherry picked from commit 327ad811aa5f965ba805ea78f879c759ca0fdafa) --- src/etc/inc/xmlparse.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/etc/inc/xmlparse.inc b/src/etc/inc/xmlparse.inc index 8a0b83a666..0edfcea93a 100644 --- a/src/etc/inc/xmlparse.inc +++ b/src/etc/inc/xmlparse.inc @@ -220,7 +220,7 @@ function is_cdata_entity($ent) { 'descr', 'detail', 'email', 'encryption_password', 'ldap_attr', 'ldap_authcn', 'ldap_basedn', 'ldap_bind', 'ldap_extended_query', 'login_banner', 'organization', 'state', - 'text', 'username' + 'text', 'username', 'password', 'auth_user', 'auth_pass' ); /* Check if the entity name starts with any of the strings above */