From 04d497c2406200a475bb597c242d2302699d9e5d Mon Sep 17 00:00:00 2001
From: Squidly271 <unraidsquid@gmail.com>
Date: Wed, 12 Mar 2025 20:07:15 -0400
Subject: [PATCH] Fix: Disallow HTML in plugin attributes

---
 emhttp/plugins/dynamix.plugin.manager/scripts/plugin | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/emhttp/plugins/dynamix.plugin.manager/scripts/plugin b/emhttp/plugins/dynamix.plugin.manager/scripts/plugin
index 3f1bc9272..947518003 100755
--- a/emhttp/plugins/dynamix.plugin.manager/scripts/plugin
+++ b/emhttp/plugins/dynamix.plugin.manager/scripts/plugin
@@ -1,6 +1,6 @@
 #!/usr/bin/php -q
 <?PHP
-// Copyright 2005-2023, Lime Technology
+// Copyright 2005-2025, Lime Technology
 // License: GPLv2 only
 //
 // Program updates made by Bergware International (April 2020)
@@ -880,6 +880,6 @@ if ($value === false) {
   write("plugin: $error\n");
   done(1);
 }
-write("$value\n");
+write(strip_tags(html_entity_decode($value))."\n");
 done(0);
 ?>