From f9e80e5d657f6d67bb63411809564cb7f95eb8ff Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Wed, 1 Jul 2015 11:15:13 -0400
Subject: [PATCH] Encode ca/cert descr in vpn_ipsec_phase1.php

---
 usr/local/www/vpn_ipsec_phase1.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/usr/local/www/vpn_ipsec_phase1.php b/usr/local/www/vpn_ipsec_phase1.php
index 009582e504..5c7aec292a 100644
--- a/usr/local/www/vpn_ipsec_phase1.php
+++ b/usr/local/www/vpn_ipsec_phase1.php
@@ -805,7 +805,7 @@ function dpdchkbox_change() {
 									if ($pconfig['certref'] == $cert['refid'])
 										$selected = "selected=\"selected\"";
 							?>
-								<option value="<?=$cert['refid'];?>" <?=$selected;?>><?=$cert['descr'];?></option>
+								<option value="<?=$cert['refid'];?>" <?=$selected;?>><?=htmlspecialchars($cert['descr']);?></option>
 							<?php endforeach; ?>
 							</select>
 							<br />
@@ -824,7 +824,7 @@ function dpdchkbox_change() {
 									if ($pconfig['caref'] == $ca['refid'])
 										$selected = "selected=\"selected\"";
 							?>
-								<option value="<?=$ca['refid'];?>" <?=$selected;?>><?=$ca['descr'];?></option>
+								<option value="<?=$ca['refid'];?>" <?=$selected;?>><?=htmlspecialchars($ca['descr']);?></option>
 							<?php endforeach; ?>
 							</select>
 							<br />