From b02557d88a2094330249dc06c2990184d2696372 Mon Sep 17 00:00:00 2001
From: Damien Regad <dregad@mantisbt.org>
Date: Sat, 15 Nov 2014 16:43:20 +0100
Subject: [PATCH] Revert "Fix #17870: XSS in adm_config_report.php"

This reverts commit b509ab380f91e84d9683dbfdb02206b88a9b86fb.

The wrong string API call was used, it should have been
string_attribute() and not string_display_line(). Thanks to
Paul Richards for pointing this out.
---
 adm_config_report.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/adm_config_report.php b/adm_config_report.php
index bb60408dd4..f08929733a 100644
--- a/adm_config_report.php
+++ b/adm_config_report.php
@@ -486,7 +486,7 @@ function print_option_list_from_array( array $p_array, $p_filter_value ) {
 				<label for="config-option"><span><?php echo lang_get( 'configuration_option' ) ?></span></label>
 				<span class="input">
 					<input type="text" name="config_option"
-						value="<?php echo string_display_line( $t_edit_option ); ?>"
+						value="<?php echo $t_edit_option; ?>"
 						size="64" maxlength="64" />
 				</span>
 				<span class="label-style"></span>