Use htmlspecialchars(), a better solution for #2952

This commit is contained in:
Renato Botelho 2014-02-17 10:23:34 -03:00
parent a8495e500a
commit acbab51a8c

View File

@ -181,7 +181,7 @@ if ($g['platform'] == "nanobsd") {
$txt .= " " . gettext("NanoBSD Size") . " : " . trim(file_get_contents("/etc/nanosize.txt")) . "\\n";
}
$txt .= " " . gettext("Built On") .": ". $current_installed_buildtime . "\\n";
$txt .= " " . gettext("New version") .": ". addslashes($remote_version) . "\\n\\n";
$txt .= " " . gettext("New version") .": ". htmlspecialchars($remote_version, ENT_QUOTES | ENT_HTML401). "\\n\\n";
$txt .= " " . gettext("Update source") .": ". $updater_url . "\\n";
update_output_window($txt);
?>