From fe482ccc1eaf59137b29008bc040faaad25088f0 Mon Sep 17 00:00:00 2001
From: jim-p <jimp@netgate.com>
Date: Thu, 13 Jun 2019 13:09:36 -0400
Subject: [PATCH] Encode hostname in services_acb.php before use. Fixes #9584

---
 src/usr/local/www/services_acb.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/usr/local/www/services_acb.php b/src/usr/local/www/services_acb.php
index c902c74d3a..6f7a7fc84a 100644
--- a/src/usr/local/www/services_acb.php
+++ b/src/usr/local/www/services_acb.php
@@ -505,7 +505,7 @@ if (!$legacy) {
 			</option>
 			<?endforeach?>
 			<? if ($host_not_found) { ?>
-				<option value='<?=$hostname?>' SELECTED><?=$hostname?></option>
+				<option value='<?=urlencode($hostname)?>' SELECTED><?=htmlspecialchars($hostname)?></option>
 			<? } ?>
 		</select>
 <?php }