mirror of
https://github.com/unraid/webgui.git
synced 2026-01-06 09:39:58 -06:00
Fix: Reading Share Settings from Share containing ' crashes the share
Root cause is that arguments passed to mk_option() should be sanitized via htmlspecialchars().
This commit is contained in:
@@ -180,6 +180,8 @@ function my_error($code) {
|
||||
}
|
||||
|
||||
function mk_option($select, $value, $text, $extra="") {
|
||||
$value = htmlspecialchars($value);
|
||||
$text = htmlspecialchars($text);
|
||||
return "<option value='$value'".($value == $select ? " selected" : "").(strlen($extra) ? " $extra" : "").">$text</option>";
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user