From acbab51a8c2fbdbcc41c96090afa71b8b57db68e Mon Sep 17 00:00:00 2001 From: Renato Botelho Date: Mon, 17 Feb 2014 10:23:34 -0300 Subject: [PATCH] Use htmlspecialchars(), a better solution for #2952 --- usr/local/www/system_firmware_check.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/usr/local/www/system_firmware_check.php b/usr/local/www/system_firmware_check.php index 0cf9923974..544a54d1d9 100755 --- a/usr/local/www/system_firmware_check.php +++ b/usr/local/www/system_firmware_check.php @@ -181,7 +181,7 @@ if ($g['platform'] == "nanobsd") { $txt .= " " . gettext("NanoBSD Size") . " : " . trim(file_get_contents("/etc/nanosize.txt")) . "\\n"; } $txt .= " " . gettext("Built On") .": ". $current_installed_buildtime . "\\n"; -$txt .= " " . gettext("New version") .": ". addslashes($remote_version) . "\\n\\n"; +$txt .= " " . gettext("New version") .": ". htmlspecialchars($remote_version, ENT_QUOTES | ENT_HTML401). "\\n\\n"; $txt .= " " . gettext("Update source") .": ". $updater_url . "\\n"; update_output_window($txt); ?>