Fix #2952, escape necessary chars to avoid xss injection

This commit is contained in:
Renato Botelho 2014-02-14 10:23:37 -02:00
parent 429f454de6
commit d210dddff3

View File

@ -181,7 +181,7 @@ if ($g['platform'] == "nanobsd") {
$txt .= " " . gettext("NanoBSD Size") . " : " . trim(file_get_contents("/etc/nanosize.txt")) . "\\n";
}
$txt .= " " . gettext("Built On") .": ". $current_installed_buildtime . "\\n";
$txt .= " " . gettext("New version") .": ". $remote_version . "\\n\\n";
$txt .= " " . gettext("New version") .": ". addslashes($remote_version) . "\\n\\n";
$txt .= " " . gettext("Update source") .": ". $updater_url . "\\n";
update_output_window($txt);
?>