From bf2fb3db04c8724dec8eba8fd29dbb507da67655 Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Wed, 6 Aug 2014 15:52:36 -0400
Subject: [PATCH] Encode interface/VIP descriptions before displaying them on
 the NTP daemon settings.

---
 usr/local/www/services_ntpd.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/usr/local/www/services_ntpd.php b/usr/local/www/services_ntpd.php
index c68476bf66..2f66bc1733 100644
--- a/usr/local/www/services_ntpd.php
+++ b/usr/local/www/services_ntpd.php
@@ -112,7 +112,7 @@ include("head.inc");
 		echo "<option value='{$iface}'";
 		if (in_array($iface, $pconfig['interface']))
 			echo "selected";
-		echo ">{$ifacename}</option>\n";
+		echo ">" . htmlspecialchars($ifacename) . "</option>\n";
 	} ?>
 	</select>
 	<br/>